NVD

Id
86537  
Name
CVE-2017-9372  
Description
PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (buffer overflow and application crash) via a SIP packet with a crafted CSeq header in conjunction with a Via header that lacks a branch parameter.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-07-18  
Published
2017-06-02  
Modified Date
2017-07-07  
Seq
2017-9372  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
420080 86537 CVE-2017-8082 http://zeroday.insecurity.zone/exploits/concrete5_csrf_dos.txt  View
420081 86537 CVE-2017-8082 https://drive.google.com/open?id=0B3vXUYdNMECWZTd3SFRnUjllWk0  View
420082 86537 CVE-2017-8082 https://twitter.com/insecurity/status/856066923146215425  View
420083 86537 CVE-2017-8082 http://zeroday.insecurity.zone/exploits/concrete5_csrf_dos.txt  View
420084 86537 CVE-2017-8082 https://drive.google.com/open?id=0B3vXUYdNMECWZTd3SFRnUjllWk0  View
420085 86537 CVE-2017-8082 https://twitter.com/insecurity/status/856066923146215425  View
423233 86537 CVE-2017-2531 https://support.apple.com/HT207798  View
423234 86537 CVE-2017-2531 https://support.apple.com/HT207801  View
423235 86537 CVE-2017-2531 https://support.apple.com/HT207804  View
423236 86537 CVE-2017-2531 https://support.apple.com/HT207798  View
423237 86537 CVE-2017-2531 https://support.apple.com/HT207801  View
423238 86537 CVE-2017-2531 https://support.apple.com/HT207804  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68380 JVNDB-2017-004637 Asterisk Open Source などで使用される PJSIP におけるサービス運用妨害 (DoS) の脆弱性 Asterisk Open Source、Certified Asterisk およびその他の製品で使用される PJSIP には、サービス運用妨害 (バッファオーバーフローおよびアプリケーションクラッシュ) 状態にされる脆弱性が存在します。 CVE-2017-9372 0 CVE-2017-9372 86537 5 7.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004637.html 2017-04-12 2017-07-03 View