https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-04T17:38:09.156765+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2017-7617 CVE-2017-7617 2026-10-04T17:38:09.183924+00:00

Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in a CDR user field, related to X-ClientCode in chan_sip, the CDR dialplan function, and the AMI Monitor action.

 https://db.gcve.eu/vuln/usn-4814-1 USN-4814-1 — asterisk vulnerabilities 2026-10-04T17:38:09.184002+00:00

Affected: Ubuntu:Pro:16.04:LTS: asterisk

Richard Mudgett discovered that Asterisk did not properly check the length of input string when setting the user field for PartyB on a CDR. A remote attacker could use this vulnerability to cause a denial of service (crash) or potentially execute arbitrary code. (CVE-2017-16671)

Alex Villacis Lasso discovered that Asterisk did not properly check the length of input string when setting the user field for PartyA on a CDR. A remote attacker could use this vulnerability to cause a denial of service (crash) or potentially execute arbitrary code. (CVE-2017-7617)