AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2017-17090

HIGH · CVSS 7.5 EPSS 81.51% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-12-02 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. Public exploit code or proof-of-concept references have been detected in its references. Its EPSS score suggests a 81.5% probability of exploitation in the next 30 days.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2017-17090
Severity
HIGH
CVSS
7.5
EPSS
81.51%

Original NVD Description

An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older. If the chan_skinny (aka SCCP protocol) channel driver is flooded with certain requests, it can cause the asterisk process to use excessive amounts of virtual memory, eventually causing asterisk to stop processing requests of any kind.

Related CVEs

Other vulnerabilities affecting the same vendor(s)