# CVEs published 2017-09-02

4 CVEs were published on September 2, 2017: 0 critical, 0 high. Days are UTC.

- [CVE-2017-14098](https://cve.now/CVE-2017-14098.md): In the pjsip channel driver (res\_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, o (no CVSS)
- [CVE-2017-14099](https://cve.now/CVE-2017-14099.md): In res/res\_rtp\_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11 (no CVSS)
- [CVE-2017-14100](https://cve.now/CVE-2017-14100.md): In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before (no CVSS)
- [CVE-2017-14114](https://cve.now/CVE-2017-14114.md): RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitim (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2017-09-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.