CVE-2017-14098 | BDVDB-2026-89888 Detail

Description#

In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://bugs.debian.org/873909
http://www.securitytracker.com/id/1039253
http://downloads.asterisk.org/pub/security/AST-2017-007.html
http://www.securityfocus.com/bid/100583
https://issues.asterisk.org/jira/browse/ASTERISK-27152

Exploit#

No public exploit known

History#

Version 12017-09-02Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.