CVE-2017-17664

Опубликовано: 13 дек. 2017

Источник: nvd

CVSS3: 5.9

CVSS2: 4.3

EPSS Низкий

Описание

A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9. Certain compound RTCP packets cause a crash in the RTCP Stack.

Ссылки

http://downloads.digium.com/pub/security/AST-2017-012.html
Vendor Advisory
http://www.securityfocus.com/bid/102201
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040009
Third Party Advisory
VDB Entry
https://issues.asterisk.org/jira/browse/ASTERISK-27382
Issue Tracking
Patch
Vendor Advisory
https://issues.asterisk.org/jira/browse/ASTERISK-27429
Issue Tracking
Vendor Advisory
https://www.debian.org/security/2017/dsa-4076
Third Party Advisory
http://downloads.digium.com/pub/security/AST-2017-012.html
Vendor Advisory
http://www.securityfocus.com/bid/102201
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1040009
Third Party Advisory
VDB Entry
https://issues.asterisk.org/jira/browse/ASTERISK-27382
Issue Tracking
Patch
Vendor Advisory
https://issues.asterisk.org/jira/browse/ASTERISK-27429
Issue Tracking
Vendor Advisory
https://www.debian.org/security/2017/dsa-4076
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*

Версия от 13.0.0 (включая) до 13.18.4 (исключая)

cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*

Версия от 14.0.0 (включая) до 14.7.4 (исключая)

cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*

Версия от 15.0.0 (включая) до 15.1.4 (исключая)

Конфигурация 2

Одно из

cpe:2.3:a:digium:certified_asterisk:*:*:*:*:*:*:*:*

Версия до 13.13 (включая)

cpe:2.3:a:digium:certified_asterisk:13.13:cert1:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc1:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc2:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc3:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc4:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert2:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert3:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert4:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert5:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert6:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert7:*:*:*:*:*:*

cpe:2.3:a:digium:certified_asterisk:13.13:cert8:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01276

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2017-17664

CVSS3: 5.9

ubuntu

около 8 лет назад

CVE-2017-17664

CVSS3: 5.9

debian

около 8 лет назад

A Remote Crash issue was discovered in Asterisk Open Source 13.x befor ...

GHSA-v98f-vhv3-8x27

CVSS3: 5.9

github

больше 3 лет назад

EPSS

Процентиль: 79%

0.01276

Низкий

5.9 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119