Asterisk CVE-2017-14099 Information Disclosure Vulnerability
BID:100669
Info
Asterisk CVE-2017-14099 Information Disclosure Vulnerability
| Bugtraq ID: | 100669 |
| Class: | Design Error |
| CVE: |
CVE-2017-14099 |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 31 2017 12:00AM |
| Updated: | Aug 31 2017 12:00AM |
| Credit: | Klaus-Peter Junghanns. |
| Vulnerable: |
Asterisk Open Source 14.4 Asterisk Open Source 14.3.1 Asterisk Open Source 14.2.1 Asterisk Open Source 14.2 Asterisk Open Source 13.15 Asterisk Open Source 13.14.1 Asterisk Open Source 13.13.1 Asterisk Open Source 13.13 Asterisk Open Source 13.12 Asterisk Open Source 11.25.1 Asterisk Open Source 11.12.1 Asterisk Open Source 11.12 Asterisk Open Source 14.0 Asterisk Open Source 13.0 Asterisk Open Source 11.0 Asterisk Certified Asterisk 13.13-cert4 Asterisk Certified Asterisk 13.13-cert3 Asterisk Certified Asterisk 13.13 Asterisk Certified Asterisk 11.6-cert9 Asterisk Certified Asterisk 11.6-cert8 Asterisk Certified Asterisk 11.6-cert7 Asterisk Certified Asterisk 11.6-cert6 Asterisk Certified Asterisk 11.6-cert5 Asterisk Certified Asterisk 11.6-cert3 Asterisk Certified Asterisk 11.6-cert2 Asterisk Certified Asterisk 11.6-cert16 Asterisk Certified Asterisk 11.6-cert12 Asterisk Certified Asterisk 11.6-cert11 Asterisk Certified Asterisk 11.6 |
| Not Vulnerable: |
Asterisk Open Source 14.6.1 Asterisk Open Source 13.17.1 Asterisk Open Source 11.25.2 Asterisk Certified Asterisk 13.13-cert5 Asterisk Certified Asterisk 11.6-cert17 |
Discussion
Asterisk CVE-2017-14099 Information Disclosure Vulnerability
Asterisk is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may lead to other attacks.
Asterisk is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may lead to other attacks.
Exploit / POC
Asterisk CVE-2017-14099 Information Disclosure Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Asterisk CVE-2017-14099 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Asterisk CVE-2017-14099 Information Disclosure Vulnerability
References:
References:
- Asterisk Homepage (Asterisk)
- Asterisk Project Security Advisory - AST-2017-005 (Asterisk)
- CVE-2017-14099 (NVD)
- res_rtp_asterisk: Media can be hijacked even with strict RTP enabled (Asterisk)