CVE-2017-9358

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-9358
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9358.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-9358
Related
Published
2017-06-02T05:29:00Z
Modified
2025-04-20T04:11:42.294284Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion (by message logging in that loop).

References

Affected packages

Debian:11 / asterisk

Package

Name
asterisk
Purl
pkg:deb/debian/asterisk?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:13.14.1~dfsg-2

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/asterisk/asterisk

Affected ranges

Type
GIT
Repo
https://github.com/asterisk/asterisk
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0447d28fbd625334bdac49a8bcb7005e086195f9
Last affected
06f5ace1fa80ce0799c6d25954de2236a1f842c8
Last affected
1639644ba71c01a03ceec06da8899b9dad62818c
Last affected
226a7e36c538de73cee76de4183b1569bd5501e5
Last affected
37cde9225d9526e465698b958a6720d8e33709be
Last affected
3c4b64351bc44b26fdfbb9101501ad8e485c9e11
Last affected
44ae8c24fd5cd4ca1826e75c01cb2d1a16998026
Last affected
45e0392397605b8c8d0d975c63e21dd7b2c951de
Last affected
4ab2002a77ea606282631f96de73009e7b60d45a
Last affected
4efe7bf05179c25b96c6a0dea401d4847c7737af
Last affected
552cf009c0939c8b6597708135412bdc596df4bb
Last affected
59b6e5db769d77f5f2ba41869fbcab0ae6e98696
Last affected
5cc6bd8fe6a4ee99ecb05178e30ca35e07ba8e4f
Last affected
63d46b4e7a9b022b2cc8f870c9598afc57111677
Last affected
751d43e8e4173386be5455311561dfa819a642d3
Last affected
7d7b52c434eb23ef470ad51d08ee4029a7078b78
Last affected
7dbe77d63946ce204611a75d5f79d37f9d624ee1
Last affected
85335355efb2d7914a1fe20ed31afcef15fd210c
Last affected
933356d01000d7554810d34457a86e6d629fb026
Last affected
9528429f4c9d58516525224b24ff566e189c1398
Last affected
9f083db88b469c4b454a901c6b0e7c3f10dfc8f8
Last affected
a0fb436eda914dca26e96d304d3c9daca2be54de
Last affected
a254eba1d54a43c012435ee14b7a3d949af9972b
Last affected
ac0f73694b59317f776ea2f4b8f777327def154e
Last affected
bda53c1fe8bc378c64142da595f95605335ea281
Last affected
be10e65384ecaf320aec5e8a0598db618ec28084
Last affected
c45c3b55247f5735f16ebfa90b38a93913dfcee6
Last affected
c5a7c007aa7c1369e48d6db1c1c2f885371c1f51
Last affected
c6d6dd133c3db3b202f1f0d457780c9a6d841e0f
Last affected
c90ce6f6c254ce6ddc032c64fe3b10e7eeb0a846
Last affected
cc1106a06ac487e54c8222f30b6cc477d90986e1
Last affected
d6c9df8b03d4d1a4e5e70c057e1c377c0ffadb6e
Last affected
de9145e0febe6e2c83628821f4906acd89c39515
Last affected
df75b647da03eba6920020bac0cc950032a1e930
Last affected
e3830dec049a6b5316bcd609691df7c2d71ed4b8
Last affected
ee73af1d88c9ff6db90f70f934f5ea57b8ab0625
Last affected
f3a578ce98f33b7302fca71066e96ab581aa5167
Last affected
f93e55d124da09eb9929303189c4b925c42ad0bb
Last affected
fad0410486b3a47743331f14fcb565b79357887c
Last affected
fdde690e0fa2e58bf45ea2bf83962bb1c261d6e0
Last affected
ff4dbeaf3894d28de5c9e2a718702442acddcb29
Last affected
ff947c4827ea21276e5da166e6b35a4b1d9d5aee

Affected versions

13.*

13.1.0-rc1
13.1.0-rc2
13.12.0
13.12.0-rc1
13.13.0-rc1
13.8.0-rc1