CVE-2017-9358

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x
before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before
13.13-cert4, which can be triggered by sending specially crafted SCCP
packets causing an infinite loop and leading to memory exhaustion (by
message logging in that loop).

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=863906&gt;