CVE-2017-9358 A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion (by message logging in that loop).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/asterisk(Debian:14) | < 1:13.14.1~dfsg-2 | 1:13.14.1~dfsg-2 |
| debian/asterisk(Debian:14) | = 0.1.11-3 | No fix listed |
| debian/asterisk(Debian:14) | = 0.1.11-3woody1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.5-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.5-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.6-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.6-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.7.dfsg.1-2sarge6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.0.9.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-beta2.dfsg-3 | No fix listed |
Show 175 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/asterisk(Debian:14) | = 1:1.2.0-rc1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0-rc2.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.0.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.1.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-1bpo1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.10.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.11.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.12.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.13~dfsg-2etch4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.14~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.15~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.16~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.17~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-6+b1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.4.dfsg-7 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.7.1.dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.2.9.1.dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.10~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.11~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.13~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.15~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.16.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.16.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.17~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.17~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.18.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.18~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.19.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.20~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny2.1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3+lenny6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.21.2~dfsg-3.1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.2~dfsg-5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.3~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.4~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.5~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.6~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.8~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.8~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.4.9~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.1.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.1.0~dfsg~rc3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~dfsg~beta3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~dfsg~rc1-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~rc3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~rc3-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~rc6-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.0~rc7-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.2-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.6-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.7-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-1~bpo50+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-1~bpo50+2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-1~bpo50+3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze10 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze11 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze12 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze4 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze5 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze6 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze7 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze8 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.6.2.9-2+squeeze9 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.10.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.10.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.11.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.13.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.13.0~dfsg-1~bpo60+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.13.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.13.1~dfsg-1+powerpcspe1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.13.1~dfsg-1~bpo60+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.13.1~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.13.1~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.3.3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4.2-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4.3-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4.4~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.4.4~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.7.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.7.1~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.7.1~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.8.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:1.8.8.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.10.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.10.0~dfsg-1~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.10.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.10.2~dfsg-1~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.11.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.11.0~dfsg-1~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.11.0~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.12.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.12.0~dfsg-1~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.12.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.13.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.13.0~dfsg-1~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.13.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.13.1~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.13.1~dfsg-2~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.5.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.5.1~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.5.1~dfsg1-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.5.1~dfsg1-1~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.6.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.6.0~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.6.0~dfsg-3 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.7.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.7.0~dfsg-1+e1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.7.0~dfsg-1~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.8.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.8.0~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.8.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.8.1~dfsg-1~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.9.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.9.0~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:11.9.0~dfsg-2~bpo70+1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.0.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.0.0~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.1.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.1.0~dfsg-1.1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.10.0~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.11.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.12.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.12.2~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.12.2~dfsg-2 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.13.1~dfsg-1 | No fix listed |
| debian/asterisk(Debian:14) | = 1:13.13.1~dfsg-2 | No fix listed |
References
- Debian Security Tracker CVE-2017-9358 vendor-advisory
- downloads.asterisk.org third-party-advisory
- 98573 third-party-advisory vdb-entry
- 1038531 vdb-entry
- bugs.debian.org issue-tracking mailing-list third-party-advisory