Evil-DB LogoEvil-DB
← All CVEs

CVE-2017-14098

high · 7.5

In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk to crash.

7.5
CVSS
50.1%
EPSS (exploit prob.)
99th
EPSS percentile
2017-09-02
Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
digiumasterisk13.0.0
digiumasterisk13.0.0
digiumasterisk13.0.0
digiumasterisk13.0.0
digiumasterisk13.0.1
digiumasterisk13.0.2
digiumasterisk13.1.0
digiumasterisk13.1.0
digiumasterisk13.1.0
digiumasterisk13.1.1
digiumasterisk13.2.0
digiumasterisk13.2.0
digiumasterisk13.2.1
digiumasterisk13.3.0
digiumasterisk13.3.2
digiumasterisk13.4.0
digiumasterisk13.4.0
digiumasterisk13.5.0
digiumasterisk13.5.0
digiumasterisk13.6.0
digiumasterisk13.7.0
digiumasterisk13.7.0
digiumasterisk13.7.1
digiumasterisk13.7.2
digiumasterisk13.8.0
digiumasterisk13.8.0
digiumasterisk13.8.1
digiumasterisk13.8.2
digiumasterisk13.9.0
digiumasterisk13.9.1
digiumasterisk13.10.0
digiumasterisk13.10.0
digiumasterisk13.11.0
digiumasterisk13.11.1
digiumasterisk13.11.2
digiumasterisk13.12
digiumasterisk13.12.0
digiumasterisk13.12.1
digiumasterisk13.12.2
digiumasterisk13.13

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-14098