CVE-2017-9358

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-9358
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9358.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-9358
Downstream
Published
2017-06-02T05:29:00.700Z
Modified
2026-03-15T14:26:50.213393Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion (by message logging in that loop).

References

Affected packages

Git / github.com/asterisk/asterisk

Affected ranges

Type
GIT
Repo
https://github.com/asterisk/asterisk
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
85335355efb2d7914a1fe20ed31afcef15fd210c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ff4dbeaf3894d28de5c9e2a718702442acddcb29
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c90ce6f6c254ce6ddc032c64fe3b10e7eeb0a846
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c45c3b55247f5735f16ebfa90b38a93913dfcee6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5cc6bd8fe6a4ee99ecb05178e30ca35e07ba8e4f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a254eba1d54a43c012435ee14b7a3d949af9972b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
e3830dec049a6b5316bcd609691df7c2d71ed4b8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
933356d01000d7554810d34457a86e6d629fb026
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
63d46b4e7a9b022b2cc8f870c9598afc57111677
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1639644ba71c01a03ceec06da8899b9dad62818c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
59b6e5db769d77f5f2ba41869fbcab0ae6e98696
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a0fb436eda914dca26e96d304d3c9daca2be54de
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f3a578ce98f33b7302fca71066e96ab581aa5167
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4efe7bf05179c25b96c6a0dea401d4847c7737af
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fad0410486b3a47743331f14fcb565b79357887c
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
06f5ace1fa80ce0799c6d25954de2236a1f842c8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
45e0392397605b8c8d0d975c63e21dd7b2c951de
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ac0f73694b59317f776ea2f4b8f777327def154e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cc1106a06ac487e54c8222f30b6cc477d90986e1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0447d28fbd625334bdac49a8bcb7005e086195f9
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3c4b64351bc44b26fdfbb9101501ad8e485c9e11
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9f083db88b469c4b454a901c6b0e7c3f10dfc8f8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
226a7e36c538de73cee76de4183b1569bd5501e5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
df75b647da03eba6920020bac0cc950032a1e930
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7d7b52c434eb23ef470ad51d08ee4029a7078b78
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ee73af1d88c9ff6db90f70f934f5ea57b8ab0625
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
751d43e8e4173386be5455311561dfa819a642d3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7dbe77d63946ce204611a75d5f79d37f9d624ee1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
552cf009c0939c8b6597708135412bdc596df4bb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fdde690e0fa2e58bf45ea2bf83962bb1c261d6e0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
751d43e8e4173386be5455311561dfa819a642d3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f93e55d124da09eb9929303189c4b925c42ad0bb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c6d6dd133c3db3b202f1f0d457780c9a6d841e0f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
de9145e0febe6e2c83628821f4906acd89c39515
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9528429f4c9d58516525224b24ff566e189c1398
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
bda53c1fe8bc378c64142da595f95605335ea281
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
44ae8c24fd5cd4ca1826e75c01cb2d1a16998026
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
37cde9225d9526e465698b958a6720d8e33709be
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ff947c4827ea21276e5da166e6b35a4b1d9d5aee
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d6c9df8b03d4d1a4e5e70c057e1c377c0ffadb6e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
be10e65384ecaf320aec5e8a0598db618ec28084
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c5a7c007aa7c1369e48d6db1c1c2f885371c1f51
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4ab2002a77ea606282631f96de73009e7b60d45a
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.1.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.1.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.2.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.3.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.4.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.5.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.6.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.7.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.7.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.8.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.8.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.8.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.8.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.9.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.9.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.10.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.11.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.12.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.12.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.12.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.12.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.13.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.14.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.15.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.13.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.13.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "13.13.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.0.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.0.0-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.0.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.1.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.2.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.2.0-rc2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.3.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "14.4.0-rc1"
        }
    ]
}

Affected versions

13.*
13.1.0
13.1.0-rc1
13.1.0-rc2
13.12.0
13.12.0-rc1
13.13.0-rc1
13.8.0
13.8.0-rc1

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.13.0-cert1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.13.0-cert1\\-rc1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.13.0-cert1\\-rc2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.13.0-cert1\\-rc3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.13.0-cert1\\-rc4"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.13.0-cert2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "13.13.0-cert3"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-9358.json"