CVE-2016-7551 - CVE House
Back to Database
Status published High CVE-2016-7551

chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x...

Vulnerability Description

chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a denial of service (port exhaustion).

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-7551

Credits & Attribution

No credits recorded in the NVD database.

References

More from digium

View All →
CVE-2022-26651
An issue was discovered in Asterisk through 19.x and Certified...
Critical 9.8
CVE-2022-26499
An SSRF issue was discovered in Asterisk through 19.x. When...
Critical 9.1
CVE-2022-26498
An issue was discovered in Asterisk through 19.x. When using...
High 7.5
CVE-2021-32558
An issue was discovered in Sangoma Asterisk 13.x before 13.38.3,...
High 7.5
CVE-2021-31878
An issue was discovered in PJSIP in Asterisk before 16.19.1...
Medium 6.5

Affected Vendor

Affected Software

asterisk, certified asterisk, debian linux
Vulnerable Versions:
11.0.0, 11.0.1, 11.0.2, 11.1.0, 11.1.1, 11.1.2, 11.2.0, 11.2.1, 11.2.2, 11.3.0, 11.4.0, 11.5.0, 11.5.1, 11.6.0, 11.6.1, 11.7.0, 11.8.0, 11.8.1, 11.9.0, 11.10.0, 11.10.1, 11.10.2, 11.11.0, 11.12.0, 11.12.1, 11.13.0, 11.13.1, 11.14.0, 11.14.1, 11.14.2, 11.15.0, 11.15.1, 11.16.0, 11.17.0, 11.17.1, 11.18.0, 11.19.0, 11.20.0, 11.21.0, 11.21.1, 11.21.2, 11.22.0, 11.23.0, 13.0.0, 13.0.1, 13.0.2, 13.1.0, 13.1.1, 13.2.0, 13.2.1, 13.3.0, 13.3.1, 13.3.2, 13.4.0, 13.5.0, 13.6.0, 13.7.0, 13.7.1, 13.7.2, 13.8.0, 13.8.1, 13.8.2, 13.9.0, 13.9.1, 13.10.0, 13.11.0, 11.6, 13.8, 8.0

Timeline

Official Publish: April 17th, 2017
Last Modified: August 6th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.