UBUNTU-CVE-2017-9358

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion by message loggin...

Privilege escalation

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion by message loggin...

CVE-2017-9359

The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

CVE-2017-9359

The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

UBUNTU-CVE-2017-9359

The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

Out-of-bounds

The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

CVE-2017-9358

CVE-2017-9358 describes a memory exhaustion vulnerability in Asterisk Open Source. Affected versions are Asterisk Open Source 13.x before 13.15.1, 14.x before 14.4.1, and Certified Asterisk 13.13 before 13.13-cert4. The issue is triggered by specially crafted SCCP packets that cause an infinite l...

CVE-2017-9358

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion by message loggin...

CVE-2017-9358

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion by message loggin...

CVE-2017-9359

Removed by vendor...

PT-2017-18870 · Sangoma · Asterisk

Name of the Vulnerable Software and Affected Versions: Asterisk Open Source versions 13.x through 13.15.0 Asterisk Open Source versions 14.x through 14.4.0 Certified Asterisk versions 13.13 through 13.13-cert3 Description: A memory exhaustion issue exists, which can be triggered by sending...

CVE-2017-9372: Improper Restriction of Operations within the Bounds of a Memory Buffer

PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service buffer overflow and application crash via a SIP packet with a crafted CSeq header in conjunction...

PT-2017-18871

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 13.x through 13.15.0 Asterisk Open Source versions 14.x through 14.4.0 Certified Asterisk versions 13.13 through 13.13-cert3 Description The issue allows remote attackers to cause a denial of service, resulting in...

PT-2017-18883

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 13.x through 13.15.0 Asterisk Open Source versions 14.x through 14.4.0 Certified Asterisk versions 13.13 through 13.13-cert3 Description The issue allows remote attackers to cause a denial of service, resulting in...

CVE-2017-9358: Loop with Unreachable Exit Condition

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion by message loggin...

CVE-2017-9359: Out-of-bounds Read

The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted packet...

Asterisk Denial of Service Vulnerability (CNVD-2017-09858)

Asterisk is an open source software PBX that supports a variety of VoIP protocols and devices. The Asterisk chanpjsip and PJSIP denial of service vulnerabilities allow attackers to exploit this vulnerability by submitting a special request to crash the application or launch a denial of service...

Multiple Asterisk Products 'PJSIP Transaction Layer' Heap Buffer Overflow Vulnerability

Digium Asterisk Open Source and Certified Asterisk are both open source telephone exchange PBX system software from Digium, Inc. in the United States. The software supports voicemail, multi-party voice conferencing, and interactive voice response IVR. The PJSIP used in Digium Asterisk Open Source...

Asterisk 13.13 < 13.13-cert4 / 13.x < 13.15.1 / 14.x < 14.4.1 Multiple Vulnerabilities (AST-2017-002 - AST-2017-004)

According to its SIP banner, the version of Asterisk running on the remote host is 13.13 prior to 13.13-cert4, 13.x prior to 13.15.1, or 14.x prior to 14.4.1. Is it, therefore, affected by multiple vulnerabilities : - An out-of-bounds read error exists in the multi-part body parser in PJSIP due t...

Denial of Service Vulnerability in Multiple Asterisk Products

Asterisk Certified Asterisk and Asterisk Open Source are products of Digium Corporation, U.S.A. Asterisk Open Source is a suite of open source telephone exchange PBX system software. The software supports voicemail, multi-party voice conferencing, Interactive Voice Response IVR and more. A remote...