CVE-2017-14098

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2017-14098

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-14098.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2017-14098

Downstream

UBUNTU-CVE-2017-14098

Published

2017-09-02T16:29:00Z

Modified

2025-07-29T07:51:24.028185Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash.

References

Affected packages

Debian:11 / asterisk

Package

Name: asterisk
Purl: pkg:deb/debian/asterisk?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1:13.17.1~dfsg-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / github.com/asterisk/asterisk

Affected ranges

Type: GIT
Repo: https://github.com/asterisk/asterisk
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

0356032772b3b5074a85676f4b616bbbdd68ed50

Last affected

06f5ace1fa80ce0799c6d25954de2236a1f842c8

Last affected

0800ab33b5502d3a28409f813a698e298c55a2a7

Last affected

0a1b924030d38524f9d645457fbbb82cb05b00bb

Last affected

0c00ee754b436ca926b92b469ce259e8fdc8732e

Last affected

0f8d2744dce295cd0629e26b07cd51ad4bf5da9a

Last affected

106c33d20fe0709159a6c57c970cc95a98bfba9f

Last affected

1639644ba71c01a03ceec06da8899b9dad62818c

Last affected

1a9331e814407d43a2e46e24825a6eedc7f2805f

Last affected

211d2836de28a51a91c1cb27f1ab16eba05c9b51

Last affected

226a7e36c538de73cee76de4183b1569bd5501e5

Last affected

22f1f880c43a69190db29b73fede7073580bbc09

Last affected

24e12d30603cf14aabe87376a18abdb01d3c1999

Last affected

2af4e887ede2b38a6c8d4c8d32f1e2177ea1bc24

Last affected

2f573737b0360acc150110f11c6038bf072f1d30

Last affected

35d74f5d4e15903c66abe602432df9e04049edb5

Last affected

37cde9225d9526e465698b958a6720d8e33709be

Last affected

39df1c5a06b3e0155b9f28118b842ce45fbc8e94

Last affected

3c4b64351bc44b26fdfbb9101501ad8e485c9e11

Last affected

3d32a671506472457298f7ab64f6efb84088bd61

Last affected

45e0392397605b8c8d0d975c63e21dd7b2c951de

Last affected

4ab2002a77ea606282631f96de73009e7b60d45a

Last affected

4c348e78e02c291e997abacf8ea00376b23efebb

Last affected

4d985c171d92eed50b95f542c4c15b60c84d188f

Last affected

4efe7bf05179c25b96c6a0dea401d4847c7737af

Last affected

552cf009c0939c8b6597708135412bdc596df4bb

Last affected

59b6e5db769d77f5f2ba41869fbcab0ae6e98696

Last affected

5cc6bd8fe6a4ee99ecb05178e30ca35e07ba8e4f

Last affected

63d46b4e7a9b022b2cc8f870c9598afc57111677

Last affected

658f72cb71d8b5d4063e1ec70588cd55a4c52bc2

Last affected

684b0dde49a68d4bcfb70ca6ce2c27f6bcddaad7

Last affected

7032890c9e21d69a628b40612aa3d86147c542d9

Last affected

7792775db142f515b2701e41ee25ae699ad57e4f

Last affected

79ceeea8f80bac8c8d5870490a013036bd83e510

Last affected

7d7b52c434eb23ef470ad51d08ee4029a7078b78

Last affected

7d9a0a89df7e81b6bc821e92ebdda56e7f865a4b

Last affected

7dbe77d63946ce204611a75d5f79d37f9d624ee1

Last affected

7f9db93d8afd8879b6e5583d4556d4626d7f02ba

Last affected

7fc2c4b7843f06a1f421fadbf15a3e2afef0e1fb

Last affected

82e513d699311c1e5b1b96639147da2b9a4441e8

Last affected

85335355efb2d7914a1fe20ed31afcef15fd210c

Last affected

8effd766a94a3e12392975551dd3827568f439f7

Last affected

933356d01000d7554810d34457a86e6d629fb026

Last affected

9528429f4c9d58516525224b24ff566e189c1398

Last affected

9f52e16c269a3c18d9f50f92c4553e8e6d72e838

Last affected

a0fb436eda914dca26e96d304d3c9daca2be54de

Last affected

a254eba1d54a43c012435ee14b7a3d949af9972b

Last affected

a33aa668a56760ef54ebe78bd878809910398b54

Last affected

a6ac89c740a9a8e9ee0e008e12df3998ea6a2492

Last affected

a92aa59c1df5092ad92b7fd1641841bf31f063fb

Last affected

ac0f73694b59317f776ea2f4b8f777327def154e

Last affected

b5b3cf89410fecfd7f4a689e6947e7aff008f086

Last affected

b633f5ac9497824f5bdd67657a04c94aabc88e0c

Last affected

b634297c8c7a22a6e62fd7150dea185bebf2129e

Last affected

bda53c1fe8bc378c64142da595f95605335ea281

Last affected

be10e65384ecaf320aec5e8a0598db618ec28084

Last affected

bf9a299c759d612386f0c2293f9a490b6fd79bb1

Last affected

c30613f7923ddb339dd30b9e1ce7cb18d15f75dc

Last affected

c45c3b55247f5735f16ebfa90b38a93913dfcee6

Last affected

c5a7c007aa7c1369e48d6db1c1c2f885371c1f51

Last affected

c6d6dd133c3db3b202f1f0d457780c9a6d841e0f

Last affected

c90ce6f6c254ce6ddc032c64fe3b10e7eeb0a846

Last affected

cc1106a06ac487e54c8222f30b6cc477d90986e1

Last affected

dabf482ce43ef37f4cef7a85e7971382b506f5c8

Last affected

dbead3dd974c8ebf16577f579dccfb75de53b478

Last affected

de9145e0febe6e2c83628821f4906acd89c39515

Last affected

df5493573af6efba1fb8ec7f852e85b611eb2fcc

Last affected

e3830dec049a6b5316bcd609691df7c2d71ed4b8

Last affected

e5a3b1d0e751e1d9799dfeddb31d3091b31a6e96

Last affected

e6c7e7d08f4652f4382d72100739116cf5586932

Last affected

e7305c01f21a8e935e449e19652f96a582bd76dd

Last affected

ec0088f7fb1d4bc744657403d2607a1ae9547c27

Last affected

ec97c41ac817bce13d8bd9436c35ad3ef95a9f72

Last affected

ee73af1d88c9ff6db90f70f934f5ea57b8ab0625

Last affected

ee7aa21e683f0b46705effb0cf9a8e0af59b0160

Last affected

f6ad2915b308e4132df613dce59d994656f7b7a8

Last affected

fad0410486b3a47743331f14fcb565b79357887c

Last affected

fbdaade2645d954d9bd0191dd60a218acfa93ba1

Last affected

fdde690e0fa2e58bf45ea2bf83962bb1c261d6e0

Last affected

ff4dbeaf3894d28de5c9e2a718702442acddcb29

Affected versions

13.*

13.1.0-rc1

13.1.0-rc2

13.12.0

13.12.0-rc1

13.13.0

13.13.0-rc1

13.13.0-rc2

13.8.0-rc1

certified/13.*

certified/13.13-cert1

certified/13.13-cert1-rc1

certified/13.13-cert1-rc2

certified/13.13-cert1-rc3

certified/13.13-cert1-rc4