VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Nov 9, 2017· Updated Jun 17, 2026

CVE-2017-16672

CVE-2017-16672

Description

An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully established. When this happens the session object never gets destroyed. Eventually Asterisk can run out of memory and crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

14
  • Digium/Asterisk
    cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*
    Range: >=13.0.0,<13.18.1
  • Digium/Certified Asterisk12 versions
    cpe:2.3:a:digium:certified_asterisk:13.13.0:*:*:*:*:*:*:*+ 11 more
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:*:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert1_rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert2:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert3:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert4:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert5:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:13.13.0:cert6:*:*:*:*:*:*
    • (no CPE)range: <13.13-cert7
  • Asterisk/Asterisk Open Sourcellm-fuzzy
    Range: <13.18.1, <14.7.1, <15.1.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.

CVE-2017-16672 · Medium · VYPR