Asterisk Security Vulnerabilities and Issues — Asterisk CVE List

Lucene search

DigiumAsterisk

3 matches found

CVE•added 2017/12/02 12:29 a.m.•98 views

CVE-2017-17090

An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use ...

7.5CVSS7.3AI score0.89295EPSS

CVE•added 2017/12/27 5:8 p.m.•84 views

CVE-2017-17850

An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older. A select set of SIP messages create a dialog in Asterisk. Those SIP messages must contain a contact header. For those messages, if the header was not present and the PJSIP channel d...

7.5CVSS7.4AI score0.72176EPSS

CVE•added 2017/12/13 8:29 p.m.•74 views

CVE-2017-17664

A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9. Certain compound RTCP packets cause a crash in the RTCP Stack.

5.9CVSS5.9AI score0.03141EPSS