In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the "nat" and "symmetric_rtp" options allow redirecting where Asterisk sends the next RTCP report.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x     before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading     stale buffer contents and when combined with the nat and symmetric_rtp options allow redirecting where     Asterisk sends the next RTCP report. (CVE-2017-14603)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-201710-29 (Asterisk: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Asterisk. Please review       the referenced CVE identifiers for details.
  Impact :

    A remote attacker could execute arbitrary code, cause a denial of       service condition, or cause an unauthorized data disclosure by enticing a       user to run malicious code.
  Workaround :

    There is no known workaround at this time.

According to its SIP banner, the version of Asterisk running on the remote host is 11.x prior to 11.25.3, 13.x prior to 13.17.2, 14.x prior to 14.6.2, 11.6 prior to 11.6-cert18, or 13.13 prior to 13.13-cert6. It is therefore, affected by an information disclosure vulnerability due to insufficient RTCP packet validation. A remote attacker could potentially read buffer contents and redirect where the next RTCP report goes.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Klaus-Peter Junghann discovered that insufficient validation of RTCP packets in Asterisk may result in an information leak. Please see the upstream advisory at http://downloads.asterisk.org/pub/security/AST-2017-008.html for additional details.

ID	Name	Product	Family	Severity
252370	Linux Distros Unpatched Vulnerability : CVE-2017-14603	Nessus	Misc.	high
104230	GLSA-201710-29 : Asterisk: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	critical
104042	Asterisk 11.x < 11.25.3 / 13.x < 13.17.2 / 14.x < 14.6.2 / 11.6 < 11.6-cert18 / 13.13 < 13.13-cert6 RTP/RTCP information leak (AST-2017-008)	Nessus	Misc.	high
103654	Debian DSA-3990-1 : asterisk - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2017-14603

high

Tenable Plugins

high

critical

high

high