Lucene search

K
ubuntuUbuntuUSN-4814-1
HistoryMar 15, 2021 - 12:00 a.m.

Asterisk vulnerabilities

2021-03-1500:00:00
ubuntu.com
10

9 High

AI Score

Confidence

High

0.018 Low

EPSS

Percentile

87.9%

Releases

  • Ubuntu 16.04 ESM

Packages

  • asterisk - Open Source Private Branch Exchange (PBX)

Details

Richard Mudgett discovered that Asterisk did not properly check the length
of input string when setting the user field for PartyB on a CDR. A remote
attacker could use this vulnerability to cause a denial of service (crash)
or potentially execute arbitrary code. (CVE-2017-16671)

Alex Villacis Lasso discovered that Asterisk did not properly check the
length of input string when setting the user field for PartyA on a CDR. A
remote attacker could use this vulnerability to cause a denial of service
(crash) or potentially execute arbitrary code. (CVE-2017-7617)

OSVersionArchitecturePackageVersionFilename
Ubuntu16.04noarchasterisk-ooh323< 1:13.1.0~dfsg-1.1ubuntu4.1+esm1UNKNOWN
Ubuntu16.04noarchasterisk< 1:13.1.0~dfsg-1.1ubuntu4.1UNKNOWN
Ubuntu16.04noarchasterisk-config< 1:13.1.0~dfsg-1.1ubuntu4.1UNKNOWN
Ubuntu16.04noarchasterisk-dahdi< 1:13.1.0~dfsg-1.1ubuntu4.1UNKNOWN
Ubuntu16.04noarchasterisk-dahdi-dbgsym< 1:13.1.0~dfsg-1.1ubuntu4.1UNKNOWN
Ubuntu16.04noarchasterisk-dbg< 1:13.1.0~dfsg-1.1ubuntu4.1UNKNOWN
Ubuntu16.04noarchasterisk-dbgsym< 1:13.1.0~dfsg-1.1ubuntu4.1UNKNOWN
Ubuntu16.04noarchasterisk-dev< 1:13.1.0~dfsg-1.1ubuntu4.1UNKNOWN
Ubuntu16.04noarchasterisk-doc< 1:13.1.0~dfsg-1.1ubuntu4.1UNKNOWN
Ubuntu16.04noarchasterisk-mobile< 1:13.1.0~dfsg-1.1ubuntu4.1UNKNOWN
Rows per page:
1-10 of 381