5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.4 High
AI Score
Confidence
High
0.04 Low
EPSS
Percentile
92.1%
Asterisk Open Source and Certified Asterisk are prone to a
remote denial of service (DoS) vulnerability.
This script has been deprecated since this check is already covered in
# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.107148");
script_version("2024-06-27T05:05:29+0000");
script_tag(name:"last_modification", value:"2024-06-27 05:05:29 +0000 (Thu, 27 Jun 2024)");
script_tag(name:"creation_date", value:"2017-04-18 10:44:46 +0200 (Tue, 18 Apr 2017)");
script_cve_id("CVE-2016-7551");
script_tag(name:"cvss_base", value:"5.0");
script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:P");
script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2017-04-25 00:39:00 +0000 (Tue, 25 Apr 2017)");
script_tag(name:"qod_type", value:"remote_banner_unreliable");
script_name("Asterisk Open Source and Certified Asterisk RTP Resource Exhaustion DoS Vulnerability");
script_tag(name:"summary", value:"Asterisk Open Source and Certified Asterisk are prone to a
remote denial of service (DoS) vulnerability.
This script has been deprecated since this check is already covered in 'Asterisk RTP Resource
Exhaustion Vulnerability' (OID: 1.3.6.1.4.1.25623.1.0.106239).");
script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");
script_tag(name:"insight", value:"The overlap dialing feature in chan_sip allows chan_sip to report to
a device that the number that has been dialed is incomplete and more digits are required. If this functionality
is used with a device that has performed username/password authentication RTP resources are leaked. This occurs
because the code fails to release the old RTP resources before allocating new ones in this scenario. If all
resources are used then RTP port exhaustion will occur and no RTP sessions are able to be set up.");
script_tag(name:"impact", value:"An attacker can exploit this issue to cause a denial-of-service condition.");
script_tag(name:"affected", value:"The following products and versions are vulnerable:
Digium Asterisk 13 before 13.11.1
Digium Asterisk 11 before 11.23.1
Digium Certified Asterisk 13 before 13.8-cert3
Digium Certified Asterisk 11 before 11.6-cert1");
script_tag(name:"solution", value:"Updates are available. Please see the references or vendor advisory for more information.");
script_xref(name:"URL", value:"http://www.securityfocus.com/bid/92888");
script_xref(name:"URL", value:"https://downloads.asterisk.org/pub/security/AST-2016-007.html");
script_tag(name:"solution_type", value:"VendorFix");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2017 Greenbone AG");
script_family("Denial of Service");
script_tag(name:"deprecated", value: TRUE);
exit(0);
}
exit(66);
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
7.4 High
AI Score
Confidence
High
0.04 Low
EPSS
Percentile
92.1%