Lucene search
HistoryFeb 22, 2016 - 3:59 p.m.
CVE-2016-2316
cve-2016-2316
asterisk open source
dos
timert1
configuration
vulnerability
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
5.6 Medium
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
89.0%
chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when the timert1 sip.conf configuration is set to a value greater than 1245, allows remote attackers to cause a denial of service (file descriptor consumption) via vectors related to large retransmit timeout values.
Affected configurations
Node
fedoraprojectfedoraMatch22
ORfedoraprojectfedoraMatch23
Node
digiumasteriskMatch1.8.0
ORdigiumasteriskMatch1.8.0beta1
ORdigiumasteriskMatch1.8.0beta2
ORdigiumasteriskMatch1.8.0beta3
ORdigiumasteriskMatch1.8.0beta4
ORdigiumasteriskMatch1.8.0beta5
ORdigiumasteriskMatch1.8.0rc2
ORdigiumasteriskMatch1.8.0rc3
ORdigiumasteriskMatch1.8.0rc4
ORdigiumasteriskMatch1.8.0rc5
ORdigiumasteriskMatch1.8.1
ORdigiumasteriskMatch1.8.1rc1
ORdigiumasteriskMatch1.8.1.1
ORdigiumasteriskMatch1.8.1.2
ORdigiumasteriskMatch1.8.2
ORdigiumasteriskMatch1.8.2.1
ORdigiumasteriskMatch1.8.2.2
ORdigiumasteriskMatch1.8.2.3
ORdigiumasteriskMatch1.8.2.4
ORdigiumasteriskMatch1.8.3
ORdigiumasteriskMatch1.8.3rc1
ORdigiumasteriskMatch1.8.3rc2
ORdigiumasteriskMatch1.8.3rc3
ORdigiumasteriskMatch1.8.3.1
ORdigiumasteriskMatch1.8.3.2
ORdigiumasteriskMatch1.8.3.3
ORdigiumasteriskMatch1.8.4
ORdigiumasteriskMatch1.8.4rc1
ORdigiumasteriskMatch1.8.4rc2
ORdigiumasteriskMatch1.8.4rc3
ORdigiumasteriskMatch1.8.4.1
ORdigiumasteriskMatch1.8.4.2
ORdigiumasteriskMatch1.8.4.3
ORdigiumasteriskMatch1.8.4.4
ORdigiumasteriskMatch1.8.5
ORdigiumasteriskMatch1.8.5rc1
ORdigiumasteriskMatch1.8.5.0
ORdigiumasteriskMatch1.8.6.0
ORdigiumasteriskMatch1.8.6.0rc1
ORdigiumasteriskMatch1.8.6.0rc2
ORdigiumasteriskMatch1.8.6.0rc3
ORdigiumasteriskMatch1.8.7.0
ORdigiumasteriskMatch1.8.7.0rc1
ORdigiumasteriskMatch1.8.7.0rc2
ORdigiumasteriskMatch1.8.7.1
ORdigiumasteriskMatch1.8.8.0
ORdigiumasteriskMatch1.8.8.0-
ORdigiumasteriskMatch1.8.8.0patch
ORdigiumasteriskMatch1.8.8.0rc1
ORdigiumasteriskMatch1.8.8.0rc2
ORdigiumasteriskMatch1.8.8.0rc3
ORdigiumasteriskMatch1.8.8.0rc4
ORdigiumasteriskMatch1.8.8.0rc5
ORdigiumasteriskMatch1.8.8.1
ORdigiumasteriskMatch1.8.8.2
ORdigiumasteriskMatch1.8.9.0
ORdigiumasteriskMatch1.8.9.0-
ORdigiumasteriskMatch1.8.9.0rc1
ORdigiumasteriskMatch1.8.9.0rc2
ORdigiumasteriskMatch1.8.9.0rc3
ORdigiumasteriskMatch1.8.9.1
ORdigiumasteriskMatch1.8.9.2
ORdigiumasteriskMatch1.8.9.3
ORdigiumasteriskMatch1.8.10.0
ORdigiumasteriskMatch1.8.10.0-
ORdigiumasteriskMatch1.8.10.0rc1
ORdigiumasteriskMatch1.8.10.0rc2
ORdigiumasteriskMatch1.8.10.0rc3
ORdigiumasteriskMatch1.8.10.0rc4
ORdigiumasteriskMatch1.8.10.1
ORdigiumasteriskMatch1.8.11.0
ORdigiumasteriskMatch1.8.11.0-
ORdigiumasteriskMatch1.8.11.0patch
ORdigiumasteriskMatch1.8.11.0rc2
ORdigiumasteriskMatch1.8.11.0rc3
ORdigiumasteriskMatch1.8.11.1
ORdigiumasteriskMatch1.8.11.1-
ORdigiumasteriskMatch1.8.11.1patch
ORdigiumasteriskMatch1.8.12
ORdigiumasteriskMatch1.8.12.0
ORdigiumasteriskMatch1.8.12.0-
ORdigiumasteriskMatch1.8.12.0rc1
ORdigiumasteriskMatch1.8.12.0rc2
ORdigiumasteriskMatch1.8.12.0rc3
ORdigiumasteriskMatch1.8.12.1
ORdigiumasteriskMatch1.8.12.2
ORdigiumasteriskMatch1.8.13.0
ORdigiumasteriskMatch1.8.13.0rc1
ORdigiumasteriskMatch1.8.13.0rc2
ORdigiumasteriskMatch1.8.13.1
ORdigiumasteriskMatch1.8.14.0-
ORdigiumasteriskMatch1.8.14.0patch
ORdigiumasteriskMatch1.8.14.0rc1
ORdigiumasteriskMatch1.8.14.0rc2
ORdigiumasteriskMatch1.8.14.1
ORdigiumasteriskMatch1.8.14.1-
ORdigiumasteriskMatch1.8.14.1patch
ORdigiumasteriskMatch1.8.15.0
ORdigiumasteriskMatch1.8.15.0-
ORdigiumasteriskMatch1.8.15.0rc1
ORdigiumasteriskMatch1.8.15.1
ORdigiumasteriskMatch1.8.16.0
ORdigiumasteriskMatch1.8.16.0-
ORdigiumasteriskMatch1.8.16.0rc1
ORdigiumasteriskMatch1.8.16.0rc2
ORdigiumasteriskMatch1.8.17.0
ORdigiumasteriskMatch1.8.17.0-
ORdigiumasteriskMatch1.8.17.0patch
ORdigiumasteriskMatch1.8.17.0rc1
ORdigiumasteriskMatch1.8.17.0rc2
ORdigiumasteriskMatch1.8.17.0rc3
ORdigiumasteriskMatch1.8.18.0
ORdigiumasteriskMatch1.8.18.0-
ORdigiumasteriskMatch1.8.18.0rc1
ORdigiumasteriskMatch1.8.18.1
ORdigiumasteriskMatch1.8.19.0
ORdigiumasteriskMatch1.8.19.0-
ORdigiumasteriskMatch1.8.19.0rc1
ORdigiumasteriskMatch1.8.19.0rc3
ORdigiumasteriskMatch1.8.19.1
ORdigiumasteriskMatch1.8.20.0-
ORdigiumasteriskMatch1.8.20.0patch
ORdigiumasteriskMatch1.8.20.0rc1
ORdigiumasteriskMatch1.8.20.0rc2
ORdigiumasteriskMatch1.8.20.1-
ORdigiumasteriskMatch1.8.20.1patch
ORdigiumasteriskMatch1.8.20.2-
ORdigiumasteriskMatch1.8.20.2patch
ORdigiumasteriskMatch1.8.21.0-
ORdigiumasteriskMatch1.8.21.0rc1
ORdigiumasteriskMatch1.8.21.0rc2
ORdigiumasteriskMatch1.8.22.0-
ORdigiumasteriskMatch1.8.22.0rc1
ORdigiumasteriskMatch1.8.22.0rc2
ORdigiumasteriskMatch1.8.23.0-
ORdigiumasteriskMatch1.8.23.0patch
ORdigiumasteriskMatch1.8.23.0rc1
ORdigiumasteriskMatch1.8.23.0rc2
ORdigiumasteriskMatch1.8.23.1
ORdigiumasteriskMatch1.8.24.0-
ORdigiumasteriskMatch1.8.24.0rc1
ORdigiumasteriskMatch1.8.24.0rc2
ORdigiumasteriskMatch1.8.24.1
ORdigiumasteriskMatch1.8.25.0-
ORdigiumasteriskMatch1.8.25.0rc1
ORdigiumasteriskMatch1.8.25.0rc2
ORdigiumasteriskMatch1.8.26.0-
ORdigiumasteriskMatch1.8.26.0rc1
ORdigiumasteriskMatch1.8.26.1
ORdigiumasteriskMatch1.8.27.0
ORdigiumasteriskMatch1.8.27.0rc1
ORdigiumasteriskMatch1.8.27.0rc2
ORdigiumasteriskMatch1.8.28.0
ORdigiumasteriskMatch1.8.28.0rc1
ORdigiumasteriskMatch1.8.28.1
ORdigiumasteriskMatch1.8.28.2
ORdigiumasteriskMatch1.8.32.0lts
ORdigiumasteriskMatch11.0.0
ORdigiumasteriskMatch11.0.0beta1
ORdigiumasteriskMatch11.0.0beta2
ORdigiumasteriskMatch11.0.0rc1
ORdigiumasteriskMatch11.0.0rc2
ORdigiumasteriskMatch11.0.1
ORdigiumasteriskMatch11.0.2
ORdigiumasteriskMatch11.1.0
ORdigiumasteriskMatch11.1.0rc1
ORdigiumasteriskMatch11.1.0rc2
ORdigiumasteriskMatch11.1.0rc3
ORdigiumasteriskMatch11.1.1
ORdigiumasteriskMatch11.1.2
ORdigiumasteriskMatch11.2.0rc1
ORdigiumasteriskMatch11.4.0rc4
ORdigiumasteriskMatch11.6.0
ORdigiumasteriskMatch11.6.0rc1
ORdigiumasteriskMatch11.6.0rc2
ORdigiumasteriskMatch11.7.0
ORdigiumasteriskMatch11.7.0rc1
ORdigiumasteriskMatch11.7.0rc2
ORdigiumasteriskMatch11.8.0-
ORdigiumasteriskMatch11.8.0rc1
ORdigiumasteriskMatch11.8.0rc2
ORdigiumasteriskMatch11.8.0rc3
ORdigiumasteriskMatch11.8.1
ORdigiumasteriskMatch11.9.0
ORdigiumasteriskMatch11.9.0rc1
ORdigiumasteriskMatch11.9.0rc2
ORdigiumasteriskMatch11.9.0rc3
ORdigiumasteriskMatch11.10.0
ORdigiumasteriskMatch11.10.0rc1
ORdigiumasteriskMatch11.10.1
ORdigiumasteriskMatch11.10.1rc1
ORdigiumasteriskMatch11.11.0
ORdigiumasteriskMatch11.11.0rc1
ORdigiumasteriskMatch11.12.0
ORdigiumasteriskMatch11.12.0rc1
ORdigiumasteriskMatch11.13.0
ORdigiumasteriskMatch11.13.0rc1
ORdigiumasteriskMatch11.14.0lts
ORdigiumasteriskMatch11.14.0rc1
ORdigiumasteriskMatch11.14.0rc2
ORdigiumasteriskMatch11.15.0
ORdigiumasteriskMatch11.15.0rc1
ORdigiumasteriskMatch11.15.0rc2
ORdigiumasteriskMatch11.16.0
ORdigiumasteriskMatch11.16.0rc1
ORdigiumasteriskMatch11.17.0rc1
ORdigiumasteriskMatch11.18.0
ORdigiumasteriskMatch11.18.0rc1
ORdigiumasteriskMatch11.19.0rc1
ORdigiumasteriskMatch11.20.0rc1
ORdigiumasteriskMatch11.21.0
ORdigiumasteriskMatch11.21.0rc1
ORdigiumasteriskMatch11.21.0rc2
ORdigiumasteriskMatch11.21.0rc3
ORdigiumasteriskMatch12.0.0
ORdigiumasteriskMatch12.1.0-
ORdigiumasteriskMatch12.1.0rc1
ORdigiumasteriskMatch12.1.0rc2
ORdigiumasteriskMatch12.1.0rc3
ORdigiumasteriskMatch12.1.1
ORdigiumasteriskMatch12.2.0
ORdigiumasteriskMatch12.2.0rc1
ORdigiumasteriskMatch12.2.0rc2
ORdigiumasteriskMatch12.2.0rc3
ORdigiumasteriskMatch12.3.0
ORdigiumasteriskMatch12.3.0rc1
ORdigiumasteriskMatch12.3.0rc2
ORdigiumasteriskMatch12.3.1
ORdigiumasteriskMatch12.3.2
ORdigiumasteriskMatch12.4.0
ORdigiumasteriskMatch12.4.0rc1
ORdigiumasteriskMatch12.5.0
ORdigiumasteriskMatch12.5.0rc1
ORdigiumasteriskMatch12.6.0
ORdigiumasteriskMatch12.6.0rc1
ORdigiumasteriskMatch12.7.0lts
ORdigiumasteriskMatch12.7.0standard
ORdigiumasteriskMatch12.7.0rc1
ORdigiumasteriskMatch12.7.0rc2
ORdigiumasteriskMatch12.7.1
ORdigiumasteriskMatch12.8.0
ORdigiumasteriskMatch12.8.0rc1
ORdigiumasteriskMatch12.8.0rc2
ORdigiumasteriskMatch12.8.1
ORdigiumasteriskMatch12.8.2
ORdigiumasteriskMatch13.0.0lts
ORdigiumasteriskMatch13.0.1
ORdigiumasteriskMatch13.1.0
ORdigiumasteriskMatch13.1.0rc1
ORdigiumasteriskMatch13.1.0rc2
ORdigiumasteriskMatch13.2.0
ORdigiumasteriskMatch13.2.0rc1
ORdigiumasteriskMatch13.3.0rc1
ORdigiumasteriskMatch13.4.0
ORdigiumasteriskMatch13.4.0rc1
ORdigiumasteriskMatch13.5.0
ORdigiumasteriskMatch13.5.0rc1
ORdigiumasteriskMatch13.6.0rc1
ORdigiumasteriskMatch13.7.0
ORdigiumasteriskMatch13.7.0rc1
ORdigiumasteriskMatch13.7.0rc2
ORdigiumasteriskMatch13.7.0rc3
ORdigiumcertified_asteriskMatch1.8.28-
ORdigiumcertified_asteriskMatch11.6cert1
ORdigiumcertified_asteriskMatch11.6cert1lts
ORdigiumcertified_asteriskMatch11.6cert1_rc2
ORdigiumcertified_asteriskMatch11.6cert10lts
ORdigiumcertified_asteriskMatch11.6cert11lts
ORdigiumcertified_asteriskMatch11.6cert2
ORdigiumcertified_asteriskMatch11.6cert2lts
ORdigiumcertified_asteriskMatch11.6cert3
ORdigiumcertified_asteriskMatch11.6cert3lts
ORdigiumcertified_asteriskMatch11.6cert4lts
ORdigiumcertified_asteriskMatch11.6cert5lts
ORdigiumcertified_asteriskMatch11.6cert6lts
ORdigiumcertified_asteriskMatch11.6cert7lts
ORdigiumcertified_asteriskMatch11.6cert8lts
ORdigiumcertified_asteriskMatch11.6cert9lts
ORdigiumcertified_asteriskMatch11.6.0lts
ORdigiumcertified_asteriskMatch11.6.0-
ORdigiumcertified_asteriskMatch11.6.0rc1
ORdigiumcertified_asteriskMatch11.6.0rc2
ORdigiumcertified_asteriskMatch13.1
ORdigiumcertified_asteriskMatch13.1cert1
ORdigiumcertified_asteriskMatch13.1cert2
ORdigiumcertified_asteriskMatch13.1.0
ORdigiumcertified_asteriskMatch13.1.0rc1
ORdigiumcertified_asteriskMatch13.1.0rc2
| CPE | Name | Operator | Version |
|---|---|---|---|
| fedoraproject:fedora | fedoraproject fedora | eq | 22 |
| fedoraproject:fedora | fedoraproject fedora | eq | 23 |
References
downloads.asterisk.org/pub/security/AST-2016-002.html
lists.fedoraproject.org/pipermail/package-announce/2016-February/177409.html
lists.fedoraproject.org/pipermail/package-announce/2016-February/177422.html
www.debian.org/security/2016/dsa-3700
www.securityfocus.com/bid/82651
www.securitytracker.com/id/1034930
Related
mageia
mageia
Updated asterisk packages fix CVE-2016-2316
2016-03-02 21:28:46
openvas
openvas
Fedora Update for asterisk FEDORA-2016-153
2016-02-18 00:00:00
Mageia: Security Advisory (MGASA-2016-0086)
2016-03-03 00:00:00
Fedora Update for asterisk FEDORA-2016-3
2016-02-18 00:00:00
nvd
nvd
CVE-2016-2316
2016-02-22 15:59:02
ubuntucve
ubuntucve
CVE-2016-2316
2016-02-22 00:00:00
cvelist
cvelist
CVE-2016-2316
2016-02-22 15:05:00
nessus
nessus
Fedora 23 : asterisk-13.7.1-1.fc23 (2016-153eed2bb8)
2016-03-04 00:00:00
Fedora 22 : asterisk-13.7.1-1.fc22 (2016-3cc13611f4)
2016-03-04 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: asterisk-13.7.1-1.fc22
2016-02-17 12:51:58
[SECURITY] Fedora 23 Update: asterisk-13.7.1-1.fc23
2016-02-17 14:22:43
debiancve
debiancve
CVE-2016-2316
2016-02-22 15:59:02
prion
prion
Design/Logic Flaw
2016-02-22 15:59:00
freebsd
freebsd
asterisk -- Multiple vulnerabilities
2016-02-03 00:00:00
debian
debian
[SECURITY] [DSA 3700-1] asterisk security update
2016-10-25 20:48:34
7.1 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:N/I:N/A:C
5.9 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
5.6 Medium
AI Score
Confidence
High
0.02 Low
EPSS
Percentile
89.0%
Related for CVE-2016-2316