CVE-2017-17090
High
Description
An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind.
SeverityHigh
CVSS7.5
Exploit probability—
ProductDigium Certified Asterisk
PublishedDec 2, 2017
First seenDec 2, 2017
How to fix
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| digium certified_asterisk | v ≤ 13.13, 13.13 | — |
| digium asterisk | v ≤ 13.8.2, v ≤ 14.7.2, v ≤ 15.1.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.