CVE catalog

CVE-2017-17090

asterisk - security update

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Updated
Source
[NVD] · [CVE record]
EPSS
82.20% · Oct 27, 2026

An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianasterisk140.1.11-3vulnerable
Debianasterisk140.1.11-3woody1vulnerable
Debianasterisk141:1.0.5-2vulnerable
Debianasterisk141:1.0.5-4vulnerable
Debianasterisk141:1.0.6-1vulnerable
Debianasterisk141:1.0.6-2vulnerable
Debianasterisk141:1.0.7-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge3vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge4vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge5vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge6vulnerable
Debianasterisk141:1.0.9.dfsg-1vulnerable
Debianasterisk141:1.0.9.dfsg-3vulnerable
Debianasterisk141:1.0.9.dfsg-4vulnerable
Debianasterisk141:1.0.9.dfsg-5vulnerable
Debianasterisk141:1.0.9.dfsg-6vulnerable
Debianasterisk141:1.2.0-beta1.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-2vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-3vulnerable
Debianasterisk141:1.2.0-rc1.dfsg-1vulnerable
Debianasterisk141:1.2.0-rc2.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-2vulnerable
Debianasterisk141:1.2.0.dfsg-3vulnerable
Debianasterisk141:1.2.0.dfsg-4vulnerable
Debianasterisk141:1.2.0.dfsg-5vulnerable
Debianasterisk141:1.2.0.dfsg-6vulnerable
Debianasterisk141:1.2.1.dfsg-1vulnerable
Debianasterisk141:1.2.1.dfsg-2vulnerable
Debianasterisk141:1.2.1.dfsg-3vulnerable
Debianasterisk141:1.2.10.dfsg-1vulnerable
Debianasterisk141:1.2.10.dfsg-1bpo1vulnerable
Debianasterisk141:1.2.10.dfsg-2vulnerable
Debianasterisk141:1.2.10.dfsg-3vulnerable
Debianasterisk141:1.2.11.dfsg-1vulnerable
Debianasterisk141:1.2.12.1.dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch1vulnerable
Debianasterisk141:1.2.13~dfsg-2etch2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch3vulnerable
Debianasterisk141:1.2.13~dfsg-2etch4vulnerable
Debianasterisk141:1.2.14~dfsg-1vulnerable
Debianasterisk141:1.2.14~dfsg-2vulnerable
Debianasterisk141:1.2.14~dfsg-3vulnerable
Debianasterisk141:1.2.14~dfsg-4vulnerable
Debianasterisk141:1.2.15~dfsg-1vulnerable
Debianasterisk141:1.2.16~dfsg-1vulnerable
Debianasterisk141:1.2.17~dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-2vulnerable
Debianasterisk141:1.2.4.dfsg-3vulnerable
Debianasterisk141:1.2.4.dfsg-4vulnerable
Debianasterisk141:1.2.4.dfsg-5vulnerable
Debianasterisk141:1.2.4.dfsg-6vulnerable
Debianasterisk141:1.2.4.dfsg-6+b1vulnerable
Debianasterisk141:1.2.4.dfsg-7vulnerable
Debianasterisk141:1.2.7.1.dfsg-1vulnerable
Debianasterisk141:1.2.7.1.dfsg-2vulnerable
Debianasterisk141:1.2.7.1.dfsg-3vulnerable
Debianasterisk141:1.2.9.1.dfsg-1vulnerable
Debianasterisk141:1.4.10~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-2vulnerable
Debianasterisk141:1.4.11~dfsg-3vulnerable
Debianasterisk141:1.4.11~dfsg-4vulnerable
Debianasterisk141:1.4.13~dfsg-1vulnerable
Debianasterisk141:1.4.15~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-2vulnerable
Debianasterisk141:1.4.17~dfsg-1vulnerable
Debianasterisk141:1.4.17~dfsg-2vulnerable
Debianasterisk141:1.4.18.1~dfsg-1vulnerable
Debianasterisk141:1.4.18~dfsg-1vulnerable
Debianasterisk141:1.4.19.1~dfsg-1vulnerable
Debianasterisk141:1.4.20~dfsg-1vulnerable
Debianasterisk141:1.4.21.1~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2.1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny5vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny6vulnerable
Debianasterisk141:1.4.21.2~dfsg-3.1vulnerable
Debianasterisk141:1.4.2~dfsg-1vulnerable
Debianasterisk141:1.4.2~dfsg-2vulnerable
Debianasterisk141:1.4.2~dfsg-3vulnerable
Debianasterisk141:1.4.2~dfsg-4vulnerable
Debianasterisk141:1.4.2~dfsg-5vulnerable
Debianasterisk141:1.4.3~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-2vulnerable
Debianasterisk141:1.4.4~dfsg-3vulnerable
Debianasterisk141:1.4.5~dfsg-1vulnerable
Debianasterisk141:1.4.6~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-2vulnerable
Debianasterisk141:1.4.9~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg~rc3-1vulnerable
Debianasterisk141:1.6.2.0-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~beta3-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~rc1-1vulnerable
Debianasterisk141:1.6.2.0~rc3-1vulnerable
Debianasterisk141:1.6.2.0~rc3-2vulnerable
Debianasterisk141:1.6.2.0~rc6-1vulnerable
Debianasterisk141:1.6.2.0~rc7-1vulnerable
Debianasterisk141:1.6.2.2-1vulnerable
Debianasterisk141:1.6.2.6-1vulnerable
Debianasterisk141:1.6.2.7-1vulnerable
Debianasterisk141:1.6.2.9-1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+2vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+3vulnerable
Debianasterisk141:1.6.2.9-2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze1vulnerable
Debianasterisk141:1.6.2.9-2+squeeze10vulnerable
Debianasterisk141:1.6.2.9-2+squeeze11vulnerable
Debianasterisk141:1.6.2.9-2+squeeze12vulnerable
Debianasterisk141:1.6.2.9-2+squeeze2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze3vulnerable
Debianasterisk141:1.6.2.9-2+squeeze4vulnerable
Debianasterisk141:1.6.2.9-2+squeeze5vulnerable
Debianasterisk141:1.6.2.9-2+squeeze6vulnerable
Debianasterisk141:1.6.2.9-2+squeeze7vulnerable
Debianasterisk141:1.6.2.9-2+squeeze8vulnerable
Debianasterisk141:1.6.2.9-2+squeeze9vulnerable
Debianasterisk141:1.8.10.0~dfsg-1vulnerable
Debianasterisk141:1.8.10.1~dfsg-1vulnerable
Debianasterisk141:1.8.11.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1+powerpcspe1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-2vulnerable
Debianasterisk141:1.8.13.1~dfsg-3vulnerable
Debianasterisk141:1.8.3.3-1vulnerable
Debianasterisk141:1.8.4-1vulnerable
Debianasterisk141:1.8.4.2-1vulnerable
Debianasterisk141:1.8.4.3-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-1vulnerable
Debianasterisk141:1.8.7.1~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-3vulnerable
Debianasterisk141:1.8.8.0~dfsg-1vulnerable
Debianasterisk141:1.8.8.2~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.10.2~dfsg-1vulnerable
Debianasterisk141:11.10.2~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-1vulnerable
Debianasterisk141:11.11.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-2vulnerable
Debianasterisk141:11.12.0~dfsg-1vulnerable
Debianasterisk141:11.12.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.12.1~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.13.1~dfsg-1vulnerable
Debianasterisk141:11.13.1~dfsg-2vulnerable
Debianasterisk141:11.13.1~dfsg-2~bpo70+1vulnerable
Debianasterisk141:11.5.1~dfsg-1vulnerable
Debianasterisk141:11.5.1~dfsg-2vulnerable
Debianasterisk141:11.5.1~dfsg1-1vulnerable
Debianasterisk141:11.5.1~dfsg1-1~bpo70+1vulnerable
Debianasterisk141:11.6.0~dfsg-1vulnerable
Debianasterisk141:11.6.0~dfsg-2vulnerable
Debianasterisk141:11.6.0~dfsg-3vulnerable
Debianasterisk141:11.7.0~dfsg-1vulnerable
Debianasterisk141:11.7.0~dfsg-1+e1vulnerable
Debianasterisk141:11.7.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.8.0~dfsg-1vulnerable
Debianasterisk141:11.8.0~dfsg-2vulnerable
Debianasterisk141:11.8.1~dfsg-1vulnerable
Debianasterisk141:11.8.1~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.9.0~dfsg-1vulnerable
Debianasterisk141:11.9.0~dfsg-2vulnerable
Debianasterisk141:11.9.0~dfsg-2~bpo70+1vulnerable
Debianasterisk141:13.0.0~dfsg-1vulnerable
Debianasterisk141:13.0.0~dfsg-2vulnerable
Debianasterisk141:13.1.0~dfsg-1vulnerable
Debianasterisk141:13.1.0~dfsg-1.1vulnerable
Debianasterisk141:13.10.0~dfsg-1vulnerable
Debianasterisk141:13.11.2~dfsg-1vulnerable
Debianasterisk141:13.12.1~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-1vulnerable
Debianasterisk141:13.13.1~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-3vulnerable
Debianasterisk141:13.13.1~dfsg-3~exp1vulnerable
Debianasterisk141:13.13.1~dfsg-4vulnerable
Debianasterisk141:13.14.0~dfsg-1vulnerable
Debianasterisk141:13.14.0~dfsg-1~exp1vulnerable
Debianasterisk141:13.14.1~dfsg-1vulnerable
Debianasterisk141:13.14.1~dfsg-2vulnerable
Debianasterisk141:13.17.0~dfsg-1vulnerable
Debianasterisk141:13.17.0~dfsg-2vulnerable
Debianasterisk141:13.17.1~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-2vulnerable
Debianasterisk141:13.18.1~dfsg-1vulnerable
Debianasterisk141:13.7.2~dfsg-1vulnerable
Debianasterisk141:13.8.0~dfsg-1vulnerable
Debianasterisk141:13.8.2~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-2vulnerable
Debianasterisk141:13.18.3~dfsg-1fixed
Ubuntuasteriskpro1:13.1.0~dfsg-1.1ubuntu3vulnerable
Ubuntuasteriskpro1:13.1.0~dfsg-1.1ubuntu4vulnerable
Ubuntuasteriskpro1:13.1.0~dfsg-1.1ubuntu4.1vulnerable
Ubuntuasteriskpro1:13.1.0~dfsg-1.1ubuntu4.1+esm1vulnerable
Debianasterisk81:11.13.1~dfsg-2vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u1vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u2vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u3vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u4vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u5fixed
Debianasterisk91:13.14.1~dfsg-2vulnerable
Debianasterisk91:13.14.1~dfsg-2+deb9u1vulnerable
Debianasterisk91:13.14.1~dfsg-2+deb9u2vulnerable
Debianasterisk91:13.14.1~dfsg-2+deb9u3fixed
Debianasterisk71:1.8.13.1~dfsg-3vulnerable
Debianasterisk71:1.8.13.1~dfsg-3+deb7u1vulnerable
Debianasterisk71:1.8.13.1~dfsg-3+deb7u2vulnerable
Debianasterisk71:1.8.13.1~dfsg1-3+deb7u3vulnerable
Debianasterisk71:1.8.13.1~dfsg1-3+deb7u4vulnerable
Debianasterisk71:1.8.13.1~dfsg1-3+deb7u5vulnerable
Debianasterisk71:1.8.13.1~dfsg1-3+deb7u6vulnerable
Debianasterisk71:1.8.13.1~dfsg1-3+deb7u7vulnerable
Debianasterisk71:1.8.13.1~dfsg1-3+deb7u8fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianasteriskdeb141:13.18.3~dfsg-1Not reportedDEBIAN-CVE-2017-17090Not reported
Debianasteriskdeb81:11.13.1~dfsg-2+deb8u5Not reportedDSA-4076-1Not reported
Debianasteriskdeb91:13.14.1~dfsg-2+deb9u3Not reportedDSA-4076-1Not reported
Debianasteriskdeb71:1.8.13.1~dfsg1-3+deb7u8Not reportedDLA-1225-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]