CVE-2017-17664
13.12.2017, 20:29
A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9. Certain compound RTCP packets cause a crash in the RTCP Stack.Enginsight
| Vendor | Product | Version |
|---|---|---|
| digium | asterisk | 13.0.0 ≤ 𝑥 < 13.18.4 |
| digium | asterisk | 14.0.0 ≤ 𝑥 < 14.7.4 |
| digium | asterisk | 15.0.0 ≤ 𝑥 < 15.1.4 |
| digium | certified_asterisk | 𝑥 ≤ 13.13 |
| digium | certified_asterisk | 13.13:cert1 |
| digium | certified_asterisk | 13.13:cert1_rc1 |
| digium | certified_asterisk | 13.13:cert1_rc2 |
| digium | certified_asterisk | 13.13:cert1_rc3 |
| digium | certified_asterisk | 13.13:cert1_rc4 |
| digium | certified_asterisk | 13.13:cert2 |
| digium | certified_asterisk | 13.13:cert3 |
| digium | certified_asterisk | 13.13:cert4 |
| digium | certified_asterisk | 13.13:cert5 |
| digium | certified_asterisk | 13.13:cert6 |
| digium | certified_asterisk | 13.13:cert7 |
| digium | certified_asterisk | 13.13:cert8 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References