CVE-2017-17090

An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind.

CVSS v3.0

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

81.51% chance of exploitation in the next 30 days, 100th percentile

Published

2017-12-02

Updated

2024-08-05

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/43992

References

• CVE Record
• NVD entry

Related

• CVE-2017-17088
• CVE-2017-17091
• CVE-2017-17085
• CVE-2017-17092
• CVE-2017-17068
• CVE-2017-17093