CVE-2017-7617

Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a…

published April 10, 2017

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in a CDR user field, related to X-ClientCode in chan_sip, the CDR dialplan function, and the AMI Monitor action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06243 · 93.5th percentile
Published
2017-04-10T14:00Z
EPSS history
Timeline
  • 10 APR 14:00Z
    Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a…
    cvelistv5