NVD

Id
86529  
Name
CVE-2017-9358  
Description
A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing a infinite loop and leading to memory exhaustion (by message logging in that loop).  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2017-06-02  
Modified Date
2017-07-07  
Seq
2017-9358  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
420036 86529 CVE-2017-8071 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9  View
420037 86529 CVE-2017-8071 [oss-security] 20170416 Silently (or obliviously) partially-fixed CONFIG_STRICT_DEVMEM bypass  View
420038 86529 CVE-2017-8071 97991  View
420039 86529 CVE-2017-8071 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7a7b5df84b6b4e5d599c7289526eed96541a0654  View
420040 86529 CVE-2017-8071 https://github.com/torvalds/linux/commit/7a7b5df84b6b4e5d599c7289526eed96541a0654  View
420041 86529 CVE-2017-8071 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9  View
420042 86529 CVE-2017-8071 [oss-security] 20170416 Silently (or obliviously) partially-fixed CONFIG_STRICT_DEVMEM bypass  View
420043 86529 CVE-2017-8071 97991  View
420044 86529 CVE-2017-8071 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7a7b5df84b6b4e5d599c7289526eed96541a0654  View
420045 86529 CVE-2017-8071 https://github.com/torvalds/linux/commit/7a7b5df84b6b4e5d599c7289526eed96541a0654  View
423179 86529 CVE-2017-2522 98588  View
423180 86529 CVE-2017-2522 https://support.apple.com/HT207797  View
423181 86529 CVE-2017-2522 https://support.apple.com/HT207798  View
423182 86529 CVE-2017-2522 https://support.apple.com/HT207800  View
423183 86529 CVE-2017-2522 https://support.apple.com/HT207801  View
423184 86529 CVE-2017-2522 98588  View
423185 86529 CVE-2017-2522 https://support.apple.com/HT207797  View
423186 86529 CVE-2017-2522 https://support.apple.com/HT207798  View
423187 86529 CVE-2017-2522 https://support.apple.com/HT207800  View
423188 86529 CVE-2017-2522 https://support.apple.com/HT207801  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68337 JVNDB-2017-004594 Asterisk Open Source および Certified Asterisk におけるリソースの枯渇に関する脆弱性 Asterisk Open Source および Certified Asterisk には、リソースの枯渇に関する脆弱性が存在します。 CVE-2017-9358 0 CVE-2017-9358 86529 5 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004594.html 2017-04-13 2017-06-30 View