Asterisk CVE-2017-17664 Remote Denial of Service Vulnerability
BID:102201
Info
Asterisk CVE-2017-17664 Remote Denial of Service Vulnerability
| Bugtraq ID: | 102201 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2017-17664 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 13 2017 12:00AM |
| Updated: | Dec 19 2017 09:01PM |
| Credit: | Tzafrir Cohen and Vitezslav Novy. |
| Vulnerable: |
Asterisk Open Source 15.1.3 Asterisk Open Source 15.1.1 Asterisk Open Source 15.1 Asterisk Open Source 14.7.3 Asterisk Open Source 14.7.1 Asterisk Open Source 14.6.1 Asterisk Open Source 14.4 Asterisk Open Source 14.3.1 Asterisk Open Source 14.2.1 Asterisk Open Source 14.2 Asterisk Open Source 13.18.3 Asterisk Open Source 13.18.1 Asterisk Open Source 13.17.1 Asterisk Open Source 13.15 Asterisk Open Source 13.14.1 Asterisk Open Source 13.13.1 Asterisk Open Source 13.13 Asterisk Open Source 13.12 Asterisk Open Source 15.1.2 Asterisk Open Source 14.7.2 Asterisk Open Source 14.0 Asterisk Open Source 13.18.2 Asterisk Open Source 13.0 Asterisk Certified Asterisk 13.13-cert8 Asterisk Certified Asterisk 13.13-cert7 Asterisk Certified Asterisk 13.13-cert6 Asterisk Certified Asterisk 13.13-cert5 Asterisk Certified Asterisk 13.13-cert4 Asterisk Certified Asterisk 13.13-cert3 Asterisk Certified Asterisk 13.13 |
| Not Vulnerable: |
Asterisk Open Source 15.1.4 Asterisk Open Source 14.7.4 Asterisk Open Source 13.18.4 Asterisk Certified Asterisk 13.13-cert9 |
Discussion
Asterisk CVE-2017-17664 Remote Denial of Service Vulnerability
Asterisk is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to crash the application resulting in denial-of-service conditions.
Following Asterisk products and versions are vulnerable:
Asterisk Open Source 13.18.2 and prior.
Asterisk Open Source 13.x prior to 13.18.4
Asterisk Open Source 14.x prior to 14.7.4
Asterisk Open Source 15.x before 15.1.4
Certified Asterisk prior to 13.13-cert9.
Asterisk is prone to a denial-of-service vulnerability.
An attacker can exploit this issue to crash the application resulting in denial-of-service conditions.
Following Asterisk products and versions are vulnerable:
Asterisk Open Source 13.18.2 and prior.
Asterisk Open Source 13.x prior to 13.18.4
Asterisk Open Source 14.x prior to 14.7.4
Asterisk Open Source 15.x before 15.1.4
Certified Asterisk prior to 13.13-cert9.
Solution / Fix
Asterisk CVE-2017-17664 Remote Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Asterisk CVE-2017-17664 Remote Denial of Service Vulnerability
References:
References: