CVE-2016-7551
First published: Fri Sep 09 2016(Updated: )
chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a denial of service (port exhaustion).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Digium Asterisk | =11.0.0 | |
| Digium Asterisk | =11.0.0-beta1 | |
| Digium Asterisk | =11.0.0-beta2 | |
| Digium Asterisk | =11.0.0-rc1 | |
| Digium Asterisk | =11.0.0-rc2 | |
| Digium Asterisk | =11.0.1 | |
| Digium Asterisk | =11.0.2 | |
| Digium Asterisk | =11.1.0 | |
| Digium Asterisk | =11.1.0-rc1 | |
| Digium Asterisk | =11.1.0-rc3 | |
| Digium Asterisk | =11.1.1 | |
| Digium Asterisk | =11.1.2 | |
| Digium Asterisk | =11.2.0 | |
| Digium Asterisk | =11.2.0-rc1 | |
| Digium Asterisk | =11.2.0-rc2 | |
| Digium Asterisk | =11.2.1 | |
| Digium Asterisk | =11.2.2 | |
| Digium Asterisk | =11.3.0 | |
| Digium Asterisk | =11.4.0 | |
| Digium Asterisk | =11.5.0 | |
| Digium Asterisk | =11.5.1 | |
| Digium Asterisk | =11.6.0 | |
| Digium Asterisk | =11.6.1 | |
| Digium Asterisk | =11.7.0 | |
| Digium Asterisk | =11.8.0 | |
| Digium Asterisk | =11.8.1 | |
| Digium Asterisk | =11.9.0 | |
| Digium Asterisk | =11.10.0 | |
| Digium Asterisk | =11.10.1 | |
| Digium Asterisk | =11.10.2 | |
| Digium Asterisk | =11.11.0 | |
| Digium Asterisk | =11.12.0 | |
| Digium Asterisk | =11.12.1 | |
| Digium Asterisk | =11.13.0 | |
| Digium Asterisk | =11.13.1 | |
| Digium Asterisk | =11.14.0 | |
| Digium Asterisk | =11.14.1 | |
| Digium Asterisk | =11.14.2 | |
| Digium Asterisk | =11.15.0 | |
| Digium Asterisk | =11.15.1 | |
| Digium Asterisk | =11.16.0 | |
| Digium Asterisk | =11.17.0 | |
| Digium Asterisk | =11.17.1 | |
| Digium Asterisk | =11.18.0 | |
| Digium Asterisk | =11.19.0 | |
| Digium Asterisk | =11.20.0 | |
| Digium Asterisk | =11.21.0 | |
| Digium Asterisk | =11.21.1 | |
| Digium Asterisk | =11.21.2 | |
| Digium Asterisk | =11.22.0 | |
| Digium Asterisk | =11.22.0-rc1 | |
| Digium Asterisk | =11.23.0 | |
| Digium Asterisk | =11.23.0-rc1 | |
| Digium Asterisk | =13.0.0 | |
| Digium Asterisk | =13.0.0-beta1 | |
| Digium Asterisk | =13.0.0-beta2 | |
| Digium Asterisk | =13.0.0-beta3 | |
| Digium Asterisk | =13.0.1 | |
| Digium Asterisk | =13.0.2 | |
| Digium Asterisk | =13.1.0 | |
| Digium Asterisk | =13.1.1 | |
| Digium Asterisk | =13.2.0 | |
| Digium Asterisk | =13.2.1 | |
| Digium Asterisk | =13.3.0 | |
| Digium Asterisk | =13.3.1 | |
| Digium Asterisk | =13.3.2 | |
| Digium Asterisk | =13.4.0 | |
| Digium Asterisk | =13.5.0 | |
| Digium Asterisk | =13.6.0 | |
| Digium Asterisk | =13.7.0 | |
| Digium Asterisk | =13.7.1 | |
| Digium Asterisk | =13.7.2 | |
| Digium Asterisk | =13.8.0 | |
| Digium Asterisk | =13.8.0-rc1 | |
| Digium Asterisk | =13.8.1 | |
| Digium Asterisk | =13.8.2 | |
| Digium Asterisk | =13.9.0 | |
| Digium Asterisk | =13.9.1 | |
| Digium Asterisk | =13.10.0 | |
| Digium Asterisk | =13.10.0-rc1 | |
| Digium Asterisk | =13.11.0 | |
| Digium Certified Asterisk | =11.6-cert1 | |
| Digium Certified Asterisk | =11.6-cert1 | |
| Digium Certified Asterisk | =11.6-cert1_rc1 | |
| Digium Certified Asterisk | =11.6-cert1_rc2 | |
| Digium Certified Asterisk | =11.6-cert10 | |
| Digium Certified Asterisk | =11.6-cert11 | |
| Digium Certified Asterisk | =11.6-cert12 | |
| Digium Certified Asterisk | =11.6-cert13 | |
| Digium Certified Asterisk | =11.6-cert14 | |
| Digium Certified Asterisk | =11.6-cert15 | |
| Digium Certified Asterisk | =11.6-cert2 | |
| Digium Certified Asterisk | =11.6-cert2 | |
| Digium Certified Asterisk | =11.6-cert3 | |
| Digium Certified Asterisk | =11.6-cert3 | |
| Digium Certified Asterisk | =11.6-cert4 | |
| Digium Certified Asterisk | =11.6-cert5 | |
| Digium Certified Asterisk | =11.6-cert6 | |
| Digium Certified Asterisk | =11.6-cert7 | |
| Digium Certified Asterisk | =11.6-cert8 | |
| Digium Certified Asterisk | =11.6-cert9 | |
| Digium Certified Asterisk | =11.6.0 | |
| Digium Certified Asterisk | =11.6.0 | |
| Digium Certified Asterisk | =11.6.0-rc1 | |
| Digium Certified Asterisk | =11.6.0-rc2 | |
| Digium Certified Asterisk | =13.8-cert1 | |
| Digium Certified Asterisk | =13.8-cert1_rc1 | |
| Digium Certified Asterisk | =13.8-cert1_rc2 | |
| Digium Certified Asterisk | =13.8-cert1_rc3 | |
| Digium Certified Asterisk | =13.8-cert2_rc1 | |
| Digium Certified Asterisk | =13.8.0 | |
| Digium Certified Asterisk | =13.8.0-rc1 | |
| Debian Debian Linux | =8.0 | |
| redhat/asterisk | <11.23.1 | 11.23.1 |
| redhat/asterisk | <13.11.1 | 13.11.1 |
| debian/asterisk | <=1:11.13.1~dfsg-2<=1:11.13.0~dfsg-1<=1:13.7.2~dfsg-1 | 1:13.11.2~dfsg-1 1:11.13.1~dfsg-2+deb8u1 |
| debian/asterisk | 1:16.28.0~dfsg-0+deb11u4 1:20.8.1~dfsg+~cs6.14.40431414-1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://issues.asterisk.org/jira/browse/ASTERISK-26272
- http://downloads.asterisk.org/pub/security/AST-2016-007.html
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1374734
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1374735
- https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838832
- https://bugzilla.redhat.com/show_bug.cgi?id=1374733
- https://security-tracker.debian.org/tracker/CVE-2016-7551
- https://issues.asterisk.org/jira/secure/attachment/54225/ASTERISK-26272-13.patch
- https://security-tracker.debian.org/tracker/CVE-2016-7550
- https://security-tracker.debian.org/tracker/CVE-2015-3008
- https://security-tracker.debian.org/tracker/CVE-2016-2232
- https://security-tracker.debian.org/tracker/CVE-2016-2316
- https://security-tracker.debian.org/tracker/CVE-2011-3389
- http://www.debian.org/security/2016/dsa-3700
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/remedy
- agent/references
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2016-7551
- agent/software-canonical-lookup
- collector/debian-bugs
- source/Debian
- agent/tags
- agent/event
- collector/security-tracker-debian
- vendor/digium
- canonical/digium asterisk
- version/digium asterisk/11.0.0
- version/digium asterisk/11.0.0-beta1
- version/digium asterisk/11.0.0-beta2
- version/digium asterisk/11.0.0-rc1
- version/digium asterisk/11.0.0-rc2
- version/digium asterisk/11.0.1
- version/digium asterisk/11.0.2
- version/digium asterisk/11.1.0
- version/digium asterisk/11.1.0-rc1
- version/digium asterisk/11.1.0-rc3
- version/digium asterisk/11.1.1
- version/digium asterisk/11.1.2
- version/digium asterisk/11.2.0
- version/digium asterisk/11.2.0-rc1
- version/digium asterisk/11.2.0-rc2
- version/digium asterisk/11.2.1
- version/digium asterisk/11.2.2
- version/digium asterisk/11.3.0
- version/digium asterisk/11.4.0
- version/digium asterisk/11.5.0
- version/digium asterisk/11.5.1
- version/digium asterisk/11.6.0
- version/digium asterisk/11.6.1
- version/digium asterisk/11.7.0
- version/digium asterisk/11.8.0
- version/digium asterisk/11.8.1
- version/digium asterisk/11.9.0
- version/digium asterisk/11.10.0
- version/digium asterisk/11.10.1
- version/digium asterisk/11.10.2
- version/digium asterisk/11.11.0
- version/digium asterisk/11.12.0
- version/digium asterisk/11.12.1
- version/digium asterisk/11.13.0
- version/digium asterisk/11.13.1
- version/digium asterisk/11.14.0
- version/digium asterisk/11.14.1
- version/digium asterisk/11.14.2
- version/digium asterisk/11.15.0
- version/digium asterisk/11.15.1
- version/digium asterisk/11.16.0
- version/digium asterisk/11.17.0
- version/digium asterisk/11.17.1
- version/digium asterisk/11.18.0
- version/digium asterisk/11.19.0
- version/digium asterisk/11.20.0
- version/digium asterisk/11.21.0
- version/digium asterisk/11.21.1
- version/digium asterisk/11.21.2
- version/digium asterisk/11.22.0
- version/digium asterisk/11.22.0-rc1
- version/digium asterisk/11.23.0
- version/digium asterisk/11.23.0-rc1
- version/digium asterisk/13.0.0
- version/digium asterisk/13.0.0-beta1
- version/digium asterisk/13.0.0-beta2
- version/digium asterisk/13.0.0-beta3
- version/digium asterisk/13.0.1
- version/digium asterisk/13.0.2
- version/digium asterisk/13.1.0
- version/digium asterisk/13.1.1
- version/digium asterisk/13.2.0
- version/digium asterisk/13.2.1
- version/digium asterisk/13.3.0
- version/digium asterisk/13.3.1
- version/digium asterisk/13.3.2
- version/digium asterisk/13.4.0
- version/digium asterisk/13.5.0
- version/digium asterisk/13.6.0
- version/digium asterisk/13.7.0
- version/digium asterisk/13.7.1
- version/digium asterisk/13.7.2
- version/digium asterisk/13.8.0
- version/digium asterisk/13.8.0-rc1
- version/digium asterisk/13.8.1
- version/digium asterisk/13.8.2
- version/digium asterisk/13.9.0
- version/digium asterisk/13.9.1
- version/digium asterisk/13.10.0
- version/digium asterisk/13.10.0-rc1
- version/digium asterisk/13.11.0
- canonical/digium certified asterisk
- version/digium certified asterisk/11.6-cert1
- version/digium certified asterisk/11.6-cert1_rc1
- version/digium certified asterisk/11.6-cert1_rc2
- version/digium certified asterisk/11.6-cert10
- version/digium certified asterisk/11.6-cert11
- version/digium certified asterisk/11.6-cert12
- version/digium certified asterisk/11.6-cert13
- version/digium certified asterisk/11.6-cert14
- version/digium certified asterisk/11.6-cert15
- version/digium certified asterisk/11.6-cert2
- version/digium certified asterisk/11.6-cert3
- version/digium certified asterisk/11.6-cert4
- version/digium certified asterisk/11.6-cert5
- version/digium certified asterisk/11.6-cert6
- version/digium certified asterisk/11.6-cert7
- version/digium certified asterisk/11.6-cert8
- version/digium certified asterisk/11.6-cert9
- version/digium certified asterisk/11.6.0
- version/digium certified asterisk/11.6.0-rc1
- version/digium certified asterisk/11.6.0-rc2
- version/digium certified asterisk/13.8-cert1
- version/digium certified asterisk/13.8-cert1_rc1
- version/digium certified asterisk/13.8-cert1_rc2
- version/digium certified asterisk/13.8-cert1_rc3
- version/digium certified asterisk/13.8-cert2_rc1
- version/digium certified asterisk/13.8.0
- version/digium certified asterisk/13.8.0-rc1
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/8.0
- package-manager/redhat
- package-manager/debian