CVE-2017-9358

State: Published
Severity: Not scored
Published: Jun 2, 2017
Updated: Aug 5, 2024
Reserved: Jun 1, 2017

Description

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion (by message logging in that loop).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

1038531vdb-entry
98573vdb-entry
http://downloads.asterisk.org/pub/security/AST-2017-004.txt
https://bugs.debian.org/863906

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.