AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2017-16672

MEDIUM · CVSS 5.9 EPSS 4.68%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-11-09 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2017-16672
Severity
MEDIUM
CVSS
5.9
EPSS
4.68%

Original Filing — NVD Description

An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7. A memory leak occurs when an Asterisk pjsip session object is created and that call gets rejected before the session itself is fully established. When this happens the session object never gets destroyed. Eventually Asterisk can run out of memory and crash.