CVE-2017-16671
Description
A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. No size checking is done when setting the user field for Party B on a CDR. Thus, it is possible for someone to use an arbitrarily large string and write past the end of the user field storage buffer. NOTE: this is different from CVE-2017-7617, which was only about the Party A buffer.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cve@mitre.org — https://issues.asterisk.org/jira/browse/ASTERISK-27337
Vendor advisory: cve@mitre.org — http://downloads.digium.com/pub/security/AST-2017-010.html
Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2017-16671
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| debian | bullseye | fixed | 1:13.18.1~dfsg-1 |
| debian | sid | fixed | 1:13.18.1~dfsg-1 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| digium | asterisk | {"startIncluding":"13.0.0","endExcluding":"13.18.1"} | 13.18.1 |
| digium | certified_asterisk | 13.13.0 | |
References
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.