CVE-2016-7551
N/A
Published: April 17, 2017 at 04:00 PM UTC
Updated: June 17, 2026 at 12:53 AM UTC
3 products affected across 2 vendorsDebian LinuxAsteriskCertified Asterisk
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 5%
Description
chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a denial of service (port exhaustion).
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
Debian Linux· Debiandrupal
95%11.0.011.0.0 beta111.0.0 beta211.0.0 rc111.0.0 rc211.0.111.0.211.1.011.1.0 rc111.1.0 rc311.1.111.1.211.10.011.10.111.10.211.11.011.12.011.12.111.13.011.13.111.14.011.14.111.14.211.15.011.15.111.16.011.17.011.17.111.18.011.19.011.2.011.2.0 rc111.2.0 rc211.2.111.2.211.20.011.21.011.21.111.21.211.22.011.22.0 rc111.23.011.23.0 rc111.3.011.4.011.5.011.5.111.6.011.6.111.7.011.8.011.8.111.9.013.0.013.0.0 beta113.0.0 beta213.0.0 beta313.0.113.0.213.1.013.1.113.10.013.10.0 rc113.11.013.2.013.2.113.3.013.3.113.3.213.4.013.5.013.6.013.7.013.7.113.7.213.8.013.8.0 rc113.8.113.8.213.9.013.9.1
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (5)
x_refsource_CONFIRMMitigationVendor Advisory
Source: [email protected]
http://downloads.asterisk.org/pub/security/AST-2016-007.htmlVendor Advisoryx_refsource_DEBIANThird Party Advisory
Source: [email protected]
http://www.debian.org/security/2016/dsa-3700x_refsource_MISCIssue TrackingPatchThird Party Advisory
Source: [email protected]
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=838832x_refsource_CONFIRMIssue TrackingPatch
Source: [email protected]
https://bugzilla.redhat.com/show_bug.cgi?id=1374733x_refsource_MISCIssue TrackingPatchThird Party Advisory
Source: [email protected]
https://issues.asterisk.org/jira/browse/ASTERISK-26272Quick Info
StatusMODIFIED
CWE
CWE-399
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card