Details of VAR-201905-0637

ID

VAR-201905-0637

CVE

CVE-2016-7550

TITLE

asterisk In NULL Pointer dereference vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2016-009339

DESCRIPTION

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service (remote). asterisk Is NULL A vulnerability related to pointer dereference exists.Service operation interruption (DoS) There is a possibility of being put into a state. DigiumAsterisk is a set of open source telephone exchange (PBX) system software from Digium, USA. The software supports voicemail, multi-party voice conferencing, interactive voice response (IVR) and more. A security vulnerability exists in DigiumAsterisk version 13.10.0

Trust: 2.16

sources: NVD: CVE-2016-7550 // JVNDB: JVNDB-2016-009339 // CNVD: CNVD-2019-16531

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2019-16531

AFFECTED PRODUCTS

vendor:

digium

model:

asterisk

scope:

version:

13.10.0

Trust: 2.4

sources: CNVD: CNVD-2019-16531 // JVNDB: JVNDB-2016-009339 // NVD: CVE-2016-7550

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-7550
value:	HIGH
Trust: 1.0
NVD:	CVE-2016-7550
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2019-16531
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201905-972
value:	HIGH
Trust: 0.6

nvd@nist.gov:	CVE-2016-7550
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2019-16531
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2016-7550
baseSeverity:	HIGH
baseScore:	7.5
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	HIGH
exploitabilityScore:	3.9
impactScore:	3.6
version:	3.0
Trust: 1.8

sources: CNVD: CNVD-2019-16531 // JVNDB: JVNDB-2016-009339 // CNNVD: CNNVD-201905-972 // NVD: CVE-2016-7550

PROBLEMTYPE DATA

problemtype:

CWE-476

Trust: 1.8

sources: JVNDB: JVNDB-2016-009339 // NVD: CVE-2016-7550

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201905-972

TYPE

code problem

Trust: 0.6

sources: CNNVD: CNNVD-201905-972

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-009339

PATCH

title:	AST-2016-006	url:	http://downloads.asterisk.org/pub/security/AST-2016-006.html	Trust: 0.8
title:	Patch for DigiumAsterisk Denial of Service Vulnerability (CNVD-2019-16531)	url:	https://www.cnvd.org.cn/patchInfo/show/163053	Trust: 0.6
title:	Digium Asterisk Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=92924	Trust: 0.6

sources: CNVD: CNVD-2019-16531 // JVNDB: JVNDB-2016-009339 // CNNVD: CNNVD-201905-972

EXTERNAL IDS

db:	NVD	id:	CVE-2016-7550	Trust: 3.0
db:	JVNDB	id:	JVNDB-2016-009339	Trust: 0.8
db:	CNVD	id:	CNVD-2019-16531	Trust: 0.6
db:	CNNVD	id:	CNNVD-201905-972	Trust: 0.6

sources: CNVD: CNVD-2019-16531 // JVNDB: JVNDB-2016-009339 // CNNVD: CNNVD-201905-972 // NVD: CVE-2016-7550

REFERENCES

url:	http://downloads.asterisk.org/pub/security/ast-2016-006.html	Trust: 1.6
url:	https://nvd.nist.gov/vuln/detail/cve-2016-7550	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-7550	Trust: 0.8
url:	https://web.nvd.nist.gov//vuln/detail/cve-2016-7550	Trust: 0.6

sources: CNVD: CNVD-2019-16531 // JVNDB: JVNDB-2016-009339 // CNNVD: CNNVD-201905-972 // NVD: CVE-2016-7550

SOURCES

db:	CNVD	id:	CNVD-2019-16531
db:	JVNDB	id:	JVNDB-2016-009339
db:	CNNVD	id:	CNNVD-201905-972
db:	NVD	id:	CVE-2016-7550

LAST UPDATE DATE

2024-11-23T22:58:40.526000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2019-16531	date:	2019-06-05T00:00:00
db:	JVNDB	id:	JVNDB-2016-009339	date:	2019-06-10T00:00:00
db:	CNNVD	id:	CNNVD-201905-972	date:	2019-05-27T00:00:00
db:	NVD	id:	CVE-2016-7550	date:	2024-11-21T02:58:11.820

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2019-16531	date:	2019-06-05T00:00:00
db:	JVNDB	id:	JVNDB-2016-009339	date:	2019-06-10T00:00:00
db:	CNNVD	id:	CNNVD-201905-972	date:	2019-05-23T00:00:00
db:	NVD	id:	CVE-2016-7550	date:	2019-05-23T19:29:00.243