AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2017-9358

HIGH · CVSS 7.5 EPSS 2.82%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2017-06-02 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2017-9358
Severity
HIGH
CVSS
7.5
EPSS
2.82%

Original Filing — NVD Description

A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1 and Certified Asterisk 13.13 before 13.13-cert4, which can be triggered by sending specially crafted SCCP packets causing an infinite loop and leading to memory exhaustion (by message logging in that loop).