CVE-2017-9372

PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (buffer overflow and application crash) via a SIP packet with a crafted CSeq header in conjunction with a Via header that lacks a branch parameter.

• CWE-119

• http://downloads.asterisk.org/pub/security/AST-2017-002.txtThird Party Advisory
• http://www.debian.org/security/2017/dsa-3933
• http://www.securityfocus.com/bid/98572Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038529
• https://bugs.debian.org/863901Mailing List, Third Party Advisory
• http://downloads.asterisk.org/pub/security/AST-2017-002.txtThird Party Advisory
• http://www.debian.org/security/2017/dsa-3933
• http://www.securityfocus.com/bid/98572Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038529
• https://bugs.debian.org/863901Mailing List, Third Party Advisory

Published

Jun 2, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9366Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scri…
• CVE-2017-9367A directory traversal vulnerability in the BlackBerry Worksp…
• CVE-2017-9368An information disclosure vulnerability in the BlackBerry Wo…
• CVE-2017-9369In BlackBerry QNX Software Development Platform (SDP) 6.6.0 …3.8
• CVE-2017-9370An information disclosure / elevation of privilege vulnerabi…
• CVE-2017-9371In BlackBerry QNX Software Development Platform (SDP) 6.6.0 …2.6
• CVE-2017-9373Memory leak in QEMU (aka Quick Emulator), when built with ID…5.5
• CVE-2017-9374Memory leak in QEMU (aka Quick Emulator), when built with US…5.5
• CVE-2017-9375QEMU (aka Quick Emulator), when built with USB xHCI controll…5.5
• CVE-2017-9376ManageEngine ServiceDesk Plus before 9314 contains a local f…
• CVE-2017-9377A command injection was identified on Barco ClickShare Base …
• CVE-2017-9378BigTree CMS through 4.2.18 does not prevent a user from dele…