Lucene search

K
ubuntucveUbuntu.comUB:CVE-2016-2316
HistoryFeb 22, 2016 - 12:00 a.m.

CVE-2016-2316

2016-02-2200:00:00
ubuntu.com
ubuntu.com
11

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.02 Low

EPSS

Percentile

88.8%

chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x
before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and
13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a
value greater than 1245, allows remote attackers to cause a denial of
service (file descriptor consumption) via vectors related to large
retransmit timeout values.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchasterisk< anyUNKNOWN

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.02 Low

EPSS

Percentile

88.8%