NVD

Id
86530  
Name
CVE-2017-9359  
Description
The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-06-17  
Published
2017-06-02  
Modified Date
2017-06-13  
Seq
2017-9359  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
420046 86530 CVE-2017-8072 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9  View
420047 86530 CVE-2017-8072 [oss-security] 20170416 Silently (or obliviously) partially-fixed CONFIG_STRICT_DEVMEM bypass  View
420048 86530 CVE-2017-8072 98010  View
420049 86530 CVE-2017-8072 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8e9faa15469ed7c7467423db4c62aeed3ff4cae3  View
420050 86530 CVE-2017-8072 https://github.com/torvalds/linux/commit/8e9faa15469ed7c7467423db4c62aeed3ff4cae3  View
420051 86530 CVE-2017-8072 http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.9  View
420052 86530 CVE-2017-8072 [oss-security] 20170416 Silently (or obliviously) partially-fixed CONFIG_STRICT_DEVMEM bypass  View
420053 86530 CVE-2017-8072 98010  View
420054 86530 CVE-2017-8072 https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8e9faa15469ed7c7467423db4c62aeed3ff4cae3  View
420055 86530 CVE-2017-8072 https://github.com/torvalds/linux/commit/8e9faa15469ed7c7467423db4c62aeed3ff4cae3  View
423189 86530 CVE-2017-2523 98584  View
423190 86530 CVE-2017-2523 https://support.apple.com/HT207797  View
423191 86530 CVE-2017-2523 https://support.apple.com/HT207798  View
423192 86530 CVE-2017-2523 https://support.apple.com/HT207800  View
423193 86530 CVE-2017-2523 https://support.apple.com/HT207801  View
423194 86530 CVE-2017-2523 98584  View
423195 86530 CVE-2017-2523 https://support.apple.com/HT207797  View
423196 86530 CVE-2017-2523 https://support.apple.com/HT207798  View
423197 86530 CVE-2017-2523 https://support.apple.com/HT207800  View
423198 86530 CVE-2017-2523 https://support.apple.com/HT207801  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68379 JVNDB-2017-004636 Asterisk Open Source などで使用される PJSIP の multi-part body パーサにおけるサービス運用妨害 (DoS) の脆弱性 Asterisk Open Source、Certified Asterisk およびその他の製品で使用される PJSIP の multi-part body パーサには、サービス運用妨害 (境界外読み取りおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2017-9359 0 CVE-2017-9359 86530 5 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004636.html 2017-04-13 2017-07-03 View