CVE-2017-7617

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-7617
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-7617.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-7617
Related
Published
2017-04-10T14:59:00Z
Modified
2025-04-20T04:10:13.057150Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in a CDR user field, related to X-ClientCode in chan_sip, the CDR dialplan function, and the AMI Monitor action.

References

Affected packages

Debian:11 / asterisk

Package

Name
asterisk
Purl
pkg:deb/debian/asterisk?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:13.14.1~dfsg-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/asterisk/asterisk

Affected ranges

Type
GIT
Repo
https://github.com/asterisk/asterisk
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
06f5ace1fa80ce0799c6d25954de2236a1f842c8
Last affected
106c33d20fe0709159a6c57c970cc95a98bfba9f
Last affected
1639644ba71c01a03ceec06da8899b9dad62818c
Last affected
1a9331e814407d43a2e46e24825a6eedc7f2805f
Last affected
211d2836de28a51a91c1cb27f1ab16eba05c9b51
Last affected
226a7e36c538de73cee76de4183b1569bd5501e5
Last affected
24e12d30603cf14aabe87376a18abdb01d3c1999
Last affected
2f573737b0360acc150110f11c6038bf072f1d30
Last affected
35d74f5d4e15903c66abe602432df9e04049edb5
Last affected
37cde9225d9526e465698b958a6720d8e33709be
Last affected
3c4b64351bc44b26fdfbb9101501ad8e485c9e11
Last affected
45e0392397605b8c8d0d975c63e21dd7b2c951de
Last affected
4efe7bf05179c25b96c6a0dea401d4847c7737af
Last affected
59b6e5db769d77f5f2ba41869fbcab0ae6e98696
Last affected
5cc6bd8fe6a4ee99ecb05178e30ca35e07ba8e4f
Last affected
63d46b4e7a9b022b2cc8f870c9598afc57111677
Last affected
658f72cb71d8b5d4063e1ec70588cd55a4c52bc2
Last affected
7032890c9e21d69a628b40612aa3d86147c542d9
Last affected
7792775db142f515b2701e41ee25ae699ad57e4f
Last affected
7d7b52c434eb23ef470ad51d08ee4029a7078b78
Last affected
7fc2c4b7843f06a1f421fadbf15a3e2afef0e1fb
Last affected
82e513d699311c1e5b1b96639147da2b9a4441e8
Last affected
85335355efb2d7914a1fe20ed31afcef15fd210c
Last affected
933356d01000d7554810d34457a86e6d629fb026
Last affected
9528429f4c9d58516525224b24ff566e189c1398
Last affected
9f52e16c269a3c18d9f50f92c4553e8e6d72e838
Last affected
a0fb436eda914dca26e96d304d3c9daca2be54de
Last affected
a254eba1d54a43c012435ee14b7a3d949af9972b
Last affected
a6ac89c740a9a8e9ee0e008e12df3998ea6a2492
Last affected
a92aa59c1df5092ad92b7fd1641841bf31f063fb
Last affected
ac0f73694b59317f776ea2f4b8f777327def154e
Last affected
b633f5ac9497824f5bdd67657a04c94aabc88e0c
Last affected
bda53c1fe8bc378c64142da595f95605335ea281
Last affected
be10e65384ecaf320aec5e8a0598db618ec28084
Last affected
c1b521ad109122b09202e0cbf4018495bed6243b
Last affected
c30613f7923ddb339dd30b9e1ce7cb18d15f75dc
Last affected
c45c3b55247f5735f16ebfa90b38a93913dfcee6
Last affected
c6d6dd133c3db3b202f1f0d457780c9a6d841e0f
Last affected
c90ce6f6c254ce6ddc032c64fe3b10e7eeb0a846
Last affected
cc1106a06ac487e54c8222f30b6cc477d90986e1
Last affected
dabf482ce43ef37f4cef7a85e7971382b506f5c8
Last affected
de9145e0febe6e2c83628821f4906acd89c39515
Last affected
df5493573af6efba1fb8ec7f852e85b611eb2fcc
Last affected
e3830dec049a6b5316bcd609691df7c2d71ed4b8
Last affected
e5a3b1d0e751e1d9799dfeddb31d3091b31a6e96
Last affected
e7305c01f21a8e935e449e19652f96a582bd76dd
Last affected
ec0088f7fb1d4bc744657403d2607a1ae9547c27
Last affected
ee73af1d88c9ff6db90f70f934f5ea57b8ab0625
Last affected
ee7aa21e683f0b46705effb0cf9a8e0af59b0160
Last affected
f6ad2915b308e4132df613dce59d994656f7b7a8
Last affected
fad0410486b3a47743331f14fcb565b79357887c
Last affected
fbdaade2645d954d9bd0191dd60a218acfa93ba1
Last affected
fdde690e0fa2e58bf45ea2bf83962bb1c261d6e0
Last affected
ff4dbeaf3894d28de5c9e2a718702442acddcb29

Affected versions

13.*

13.1.0-rc1
13.1.0-rc2
13.12.0
13.12.0-rc1
13.13.0
13.13.0-rc1
13.13.0-rc2
13.8.0-rc1

certified/13.*

certified/13.13-cert1
certified/13.13-cert1-rc1
certified/13.13-cert1-rc2
certified/13.13-cert1-rc3
certified/13.13-cert1-rc4
certified/13.13-cert2