debian · CVE-2017-17664

Quick triage

Priority: not yet assigned Published: Updated: Mon, 13 Jul 2026 06:39:44 GMT

View at Official debian advisory, NVD, CVE.org · CVE detail

Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.

Tracker summary

CVE-2017-17664 not yet assigned priority: Debian including 1 source packages (asterisk), 3 status rows across 3 suites (bullseye, forky, sid): resolved 3.

Description:

A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9. Certain compound RTCP packets cause a crash in the RTCP Stack.

cvelogic Threat Intelligence