CVE Feed

    Dashboard / CVE / CVE-2017-9372

    CVE-2017-9372

    PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (buffer overflow and application crash) via a SIP packet with a crafted CSeq header in conjunction with a Via header that lacks a branch parameter.

    Published:Jun 2, 2017
    Last Modified:Apr 20, 2025
    EPS:Jun 2, 2017
    EPSS Score:0.03658
    CVSS Score:7.5

    Affected Products

    Vendor
    Digium
    Product
    Certified Asterisk
    Vendor
    Digium
    Product
    Open Source

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-26651 (CVSS 9.8) — An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc mod…
    CVE-2021-32558 (CVSS 7.5) — An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and …
    CVE-2021-26713 (CVSS 6.5) — A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, an…
    CVE-2021-26712 (CVSS 7.5) — Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified…
    CVE-2021-26906 (CVSS 5.9) — An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x throug…
    CVE-2021-26717 (CVSS 7.5) — An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 an…
    CVE-2020-28327 (CVSS 5.3) — A res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.…
    CVE-2019-18610 (CVSS 8.8) — An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21…
    CVE-2019-18976 (CVSS 7.5) — An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.…
    CVE-2019-18790 (CVSS 6.5) — An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, an…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High