CVE-2017-9359

First published: Fri Jun 02 2017(Updated: )

The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.

Credit: cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/severity
• agent/type
• vendor/digium
• canonical/digium open source
• version/digium open source/13.0.0
• version/digium open source/13.1.0
• version/digium open source/13.1.0-rc1
• version/digium open source/13.1.0-rc2
• version/digium open source/13.2.0
• version/digium open source/13.2.0-rc1
• version/digium open source/13.3.0-rc1
• version/digium open source/13.4.0
• version/digium open source/13.4.0-rc1
• version/digium open source/13.5.0
• version/digium open source/13.5.0-rc1
• version/digium open source/13.6.0-rc1
• version/digium open source/13.7.0
• version/digium open source/13.7.0-rc1
• version/digium open source/13.8.0
• version/digium open source/13.8.0-rc1
• version/digium open source/13.8.1
• version/digium open source/13.8.2
• version/digium open source/13.9.0
• version/digium open source/13.9.0-rc1
• version/digium open source/13.10.0-rc1
• version/digium open source/13.11.0-rc1
• version/digium open source/13.12.0
• version/digium open source/13.12.0-rc1
• version/digium open source/13.12.1
• version/digium open source/13.12.2
• version/digium open source/13.13.0-rc1
• version/digium open source/13.14.0-rc1
• version/digium open source/13.15.0-rc1
• version/digium open source/14.2.0
• version/digium open source/14.2.0-rc1
• version/digium open source/14.2.0-rc2
• canonical/digium certified asterisk
• version/digium certified asterisk/13.13.0
• version/digium certified asterisk/13.13.0-cert1
• version/digium certified asterisk/13.13.0-cert1-rc1
• version/digium certified asterisk/13.13.0-cert1-rc2
• version/digium certified asterisk/13.13.0-cert1-rc3
• version/digium certified asterisk/13.13.0-cert1-rc4
• version/digium certified asterisk/13.13.0-cert2
• version/digium certified asterisk/13.13.0-cert3
• version/digium certified asterisk/13.13.0-rc1
• version/digium certified asterisk/13.13.0-rc2