Test ID:	1.3.6.1.4.1.25623.1.0.140600
Category:	Denial of Service
Title:	Asterisk DoS Vulnerability
Summary:	Asterisk is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Asterisk is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: If a compound RTCP packet is received containing more than one report (for example a Receiver Report and a Sender Report) the RTCP stack will incorrectly store report information outside of allocated memory potentially causing a crash. Affected Software/OS: Asterisk Open Source 13.x, 14.x, 15.x and Certified Asterisk 13.13. Solution: Update to version 13.18.4, 14.7.4, 15.1.4, 13.13-cert9 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-17664 BugTraq ID: 102201 http://www.securityfocus.com/bid/102201 Debian Security Information: DSA-4076 (Google Search) https://www.debian.org/security/2017/dsa-4076 http://downloads.digium.com/pub/security/AST-2017-012.html https://issues.asterisk.org/jira/browse/ASTERISK-27382 https://issues.asterisk.org/jira/browse/ASTERISK-27429 http://www.securitytracker.com/id/1040009
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.