CVE-2017-17850

An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older. A select set of SIP messages create a dialog in Asterisk. Those SIP messages must contain a contact header. For those messages, if the header was not present and the PJSIP channel driver was used, Asterisk would crash. The severity of this vulnerability is somewhat mitigated if authentication is enabled. If authentication is enabled, a user would have to first be authorized before reaching the crash point.

• CWE-20

• http://downloads.asterisk.org/pub/security/AST-2017-014.htmlVendor Advisory
• http://www.securitytracker.com/id/1040056Third Party Advisory, VDB Entry
• https://issues.asterisk.org/jira/browse/ASTERISK-27480Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201811-11
• http://downloads.asterisk.org/pub/security/AST-2017-014.htmlVendor Advisory
• http://www.securitytracker.com/id/1040056Third Party Advisory, VDB Entry
• https://issues.asterisk.org/jira/browse/ASTERISK-27480Issue Tracking, Vendor Advisory
• https://security.gentoo.org/glsa/201811-11

Published

Dec 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17845An issue was discovered in Enigmail before 1.9.9. Improper R…
• CVE-2017-17846An issue was discovered in Enigmail before 1.9.9. Regular ex…
• CVE-2017-17847An issue was discovered in Enigmail before 1.9.9. Signature …
• CVE-2017-17848An issue was discovered in Enigmail before 1.9.9. In a varia…
• CVE-2017-17849A buffer overflow vulnerability in GetGo Download Manager 5.…
• CVE-2017-1785IBM API Connect 5.0.7 and 5.0.8 could allow an authenticated…
• CVE-2017-17852kernel/bpf/verifier.c in the Linux kernel through 4.14.8 all…7.8
• CVE-2017-17853kernel/bpf/verifier.c in the Linux kernel through 4.14.8 all…7.8
• CVE-2017-17854kernel/bpf/verifier.c in the Linux kernel through 4.14.8 all…7.8
• CVE-2017-17855kernel/bpf/verifier.c in the Linux kernel through 4.14.8 all…7.8
• CVE-2017-17856kernel/bpf/verifier.c in the Linux kernel through 4.14.8 all…7.8
• CVE-2017-17857The check_stack_boundary function in kernel/bpf/verifier.c i…7.8