Lucene search
HistoryJun 17, 2014 - 2:55 p.m.
CVE-2014-4047
asterisk
open source
denial of service
cve-2014-4047
http
security vulnerability
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.2%
Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 before 1.8.15-cert6 and 11.6 before 11.6-cert3 allows remote attackers to cause a denial of service (connection consumption) via a large number of (1) inactive or (2) incomplete HTTP connections.
Affected configurations
Node
digiumcertified_asteriskMatch1.8.15-
ORdigiumcertified_asteriskMatch1.8.15cert1
ORdigiumcertified_asteriskMatch1.8.15cert1_rc1
ORdigiumcertified_asteriskMatch1.8.15cert1_rc2
ORdigiumcertified_asteriskMatch1.8.15cert1_rc3
ORdigiumcertified_asteriskMatch1.8.15cert2
ORdigiumcertified_asteriskMatch1.8.15cert3
ORdigiumcertified_asteriskMatch1.8.15cert4
ORdigiumcertified_asteriskMatch1.8.15cert5
Node
digiumasteriskMatch1.8.0
ORdigiumasteriskMatch1.8.0beta1
ORdigiumasteriskMatch1.8.0beta2
ORdigiumasteriskMatch1.8.0beta3
ORdigiumasteriskMatch1.8.0beta4
ORdigiumasteriskMatch1.8.0beta5
ORdigiumasteriskMatch1.8.0rc2
ORdigiumasteriskMatch1.8.0rc3
ORdigiumasteriskMatch1.8.0rc4
ORdigiumasteriskMatch1.8.0rc5
ORdigiumasteriskMatch1.8.1
ORdigiumasteriskMatch1.8.1rc1
ORdigiumasteriskMatch1.8.1.1
ORdigiumasteriskMatch1.8.1.2
ORdigiumasteriskMatch1.8.2
ORdigiumasteriskMatch1.8.2.1
ORdigiumasteriskMatch1.8.2.2
ORdigiumasteriskMatch1.8.2.3
ORdigiumasteriskMatch1.8.2.4
ORdigiumasteriskMatch1.8.3
ORdigiumasteriskMatch1.8.3rc1
ORdigiumasteriskMatch1.8.3rc2
ORdigiumasteriskMatch1.8.3rc3
ORdigiumasteriskMatch1.8.3.1
ORdigiumasteriskMatch1.8.3.2
ORdigiumasteriskMatch1.8.3.3
ORdigiumasteriskMatch1.8.4
ORdigiumasteriskMatch1.8.4rc1
ORdigiumasteriskMatch1.8.4rc2
ORdigiumasteriskMatch1.8.4rc3
ORdigiumasteriskMatch1.8.4.1
ORdigiumasteriskMatch1.8.4.2
ORdigiumasteriskMatch1.8.4.3
ORdigiumasteriskMatch1.8.4.4
ORdigiumasteriskMatch1.8.5
ORdigiumasteriskMatch1.8.5rc1
ORdigiumasteriskMatch1.8.5.0
ORdigiumasteriskMatch1.8.6.0
ORdigiumasteriskMatch1.8.6.0rc1
ORdigiumasteriskMatch1.8.6.0rc2
ORdigiumasteriskMatch1.8.6.0rc3
ORdigiumasteriskMatch1.8.7.0
ORdigiumasteriskMatch1.8.7.0rc1
ORdigiumasteriskMatch1.8.7.0rc2
ORdigiumasteriskMatch1.8.7.1
ORdigiumasteriskMatch1.8.8.0
ORdigiumasteriskMatch1.8.8.0-
ORdigiumasteriskMatch1.8.8.0patch
ORdigiumasteriskMatch1.8.8.0rc1
ORdigiumasteriskMatch1.8.8.0rc2
ORdigiumasteriskMatch1.8.8.0rc3
ORdigiumasteriskMatch1.8.8.0rc4
ORdigiumasteriskMatch1.8.8.0rc5
ORdigiumasteriskMatch1.8.8.1
ORdigiumasteriskMatch1.8.8.2
ORdigiumasteriskMatch1.8.9.0
ORdigiumasteriskMatch1.8.9.0-
ORdigiumasteriskMatch1.8.9.0rc1
ORdigiumasteriskMatch1.8.9.0rc2
ORdigiumasteriskMatch1.8.9.0rc3
ORdigiumasteriskMatch1.8.9.1
ORdigiumasteriskMatch1.8.9.2
ORdigiumasteriskMatch1.8.9.3
ORdigiumasteriskMatch1.8.10.0
ORdigiumasteriskMatch1.8.10.0-
ORdigiumasteriskMatch1.8.10.0rc1
ORdigiumasteriskMatch1.8.10.0rc2
ORdigiumasteriskMatch1.8.10.0rc3
ORdigiumasteriskMatch1.8.10.0rc4
ORdigiumasteriskMatch1.8.10.1
ORdigiumasteriskMatch1.8.11.0
ORdigiumasteriskMatch1.8.11.0-
ORdigiumasteriskMatch1.8.11.0patch
ORdigiumasteriskMatch1.8.11.0rc2
ORdigiumasteriskMatch1.8.11.0rc3
ORdigiumasteriskMatch1.8.11.1
ORdigiumasteriskMatch1.8.11.1-
ORdigiumasteriskMatch1.8.11.1patch
ORdigiumasteriskMatch1.8.12
ORdigiumasteriskMatch1.8.12.0
ORdigiumasteriskMatch1.8.12.0-
ORdigiumasteriskMatch1.8.12.0rc1
ORdigiumasteriskMatch1.8.12.0rc2
ORdigiumasteriskMatch1.8.12.0rc3
ORdigiumasteriskMatch1.8.12.1
ORdigiumasteriskMatch1.8.12.2
ORdigiumasteriskMatch1.8.13.0
ORdigiumasteriskMatch1.8.13.0rc1
ORdigiumasteriskMatch1.8.13.0rc2
ORdigiumasteriskMatch1.8.13.1
ORdigiumasteriskMatch1.8.14.0-
ORdigiumasteriskMatch1.8.14.0patch
ORdigiumasteriskMatch1.8.14.0rc1
ORdigiumasteriskMatch1.8.14.0rc2
ORdigiumasteriskMatch1.8.14.1
ORdigiumasteriskMatch1.8.14.1-
ORdigiumasteriskMatch1.8.14.1patch
ORdigiumasteriskMatch1.8.15.0
ORdigiumasteriskMatch1.8.15.0-
ORdigiumasteriskMatch1.8.15.0rc1
ORdigiumasteriskMatch1.8.15.1
ORdigiumasteriskMatch1.8.16.0
ORdigiumasteriskMatch1.8.16.0-
ORdigiumasteriskMatch1.8.16.0rc1
ORdigiumasteriskMatch1.8.16.0rc2
ORdigiumasteriskMatch1.8.17.0
ORdigiumasteriskMatch1.8.17.0-
ORdigiumasteriskMatch1.8.17.0patch
ORdigiumasteriskMatch1.8.17.0rc1
ORdigiumasteriskMatch1.8.17.0rc2
ORdigiumasteriskMatch1.8.17.0rc3
ORdigiumasteriskMatch1.8.18.0
ORdigiumasteriskMatch1.8.18.0-
ORdigiumasteriskMatch1.8.18.0rc1
ORdigiumasteriskMatch1.8.18.1
ORdigiumasteriskMatch1.8.19.0
ORdigiumasteriskMatch1.8.19.0-
ORdigiumasteriskMatch1.8.19.0rc1
ORdigiumasteriskMatch1.8.19.0rc3
ORdigiumasteriskMatch1.8.19.1
ORdigiumasteriskMatch1.8.20.0-
ORdigiumasteriskMatch1.8.20.0patch
ORdigiumasteriskMatch1.8.20.0rc1
ORdigiumasteriskMatch1.8.20.0rc2
ORdigiumasteriskMatch1.8.20.1-
ORdigiumasteriskMatch1.8.20.1patch
ORdigiumasteriskMatch1.8.20.2-
ORdigiumasteriskMatch1.8.20.2patch
ORdigiumasteriskMatch1.8.21.0-
ORdigiumasteriskMatch1.8.21.0rc1
ORdigiumasteriskMatch1.8.21.0rc2
ORdigiumasteriskMatch1.8.22.0-
ORdigiumasteriskMatch1.8.22.0rc1
ORdigiumasteriskMatch1.8.22.0rc2
ORdigiumasteriskMatch1.8.23.0-
ORdigiumasteriskMatch1.8.23.0patch
ORdigiumasteriskMatch1.8.23.0rc1
ORdigiumasteriskMatch1.8.23.0rc2
ORdigiumasteriskMatch1.8.23.1
ORdigiumasteriskMatch1.8.24.0-
ORdigiumasteriskMatch1.8.24.0rc1
ORdigiumasteriskMatch1.8.24.0rc2
ORdigiumasteriskMatch1.8.24.1
ORdigiumasteriskMatch1.8.25.0-
ORdigiumasteriskMatch1.8.25.0rc1
ORdigiumasteriskMatch1.8.25.0rc2
ORdigiumasteriskMatch1.8.26.0-
ORdigiumasteriskMatch1.8.26.0rc1
ORdigiumasteriskMatch1.8.26.1
ORdigiumasteriskMatch1.8.27.0
ORdigiumasteriskMatch1.8.27.0rc1
ORdigiumasteriskMatch1.8.27.0rc2
ORdigiumasteriskMatch1.8.28.0
ORdigiumasteriskMatch1.8.28.0rc1
Node
digiumasteriskMatch12.0.0
ORdigiumasteriskMatch12.1.0-
ORdigiumasteriskMatch12.1.0rc1
ORdigiumasteriskMatch12.1.0rc2
ORdigiumasteriskMatch12.1.0rc3
ORdigiumasteriskMatch12.1.1
ORdigiumasteriskMatch12.2.0
ORdigiumasteriskMatch12.2.0rc1
ORdigiumasteriskMatch12.2.0rc2
ORdigiumasteriskMatch12.2.0rc3
ORdigiumasteriskMatch12.3.0
ORdigiumasteriskMatch12.3.0rc1
ORdigiumasteriskMatch12.3.0rc2
Node
digiumasteriskMatch11.0.0
ORdigiumasteriskMatch11.0.0beta1
ORdigiumasteriskMatch11.0.0beta2
ORdigiumasteriskMatch11.0.0rc1
ORdigiumasteriskMatch11.0.0rc2
ORdigiumasteriskMatch11.0.1
ORdigiumasteriskMatch11.0.2
ORdigiumasteriskMatch11.1.0
ORdigiumasteriskMatch11.1.0rc1
ORdigiumasteriskMatch11.1.0rc3
ORdigiumasteriskMatch11.1.1
ORdigiumasteriskMatch11.1.2
ORdigiumasteriskMatch11.2.0rc1
ORdigiumasteriskMatch11.2.0rc2
ORdigiumasteriskMatch11.3.0rc1
ORdigiumasteriskMatch11.3.0rc2
ORdigiumasteriskMatch11.4.0
ORdigiumasteriskMatch11.4.0rc1
ORdigiumasteriskMatch11.4.0rc2
ORdigiumasteriskMatch11.4.0rc3
ORdigiumasteriskMatch11.5.0
ORdigiumasteriskMatch11.5.0rc1
ORdigiumasteriskMatch11.5.0rc2
ORdigiumasteriskMatch11.5.1
ORdigiumasteriskMatch11.8.0-
ORdigiumasteriskMatch11.8.0rc1
ORdigiumasteriskMatch11.8.0rc2
ORdigiumasteriskMatch11.8.0rc3
ORdigiumasteriskMatch11.8.1
ORdigiumasteriskMatch11.9.0
ORdigiumasteriskMatch11.9.0rc1
ORdigiumasteriskMatch11.9.0rc2
ORdigiumasteriskMatch11.10.0
ORdigiumasteriskMatch11.10.0rc1
Node
digiumcertified_asteriskMatch11.6cert1
ORdigiumcertified_asteriskMatch11.6cert1_rc1
ORdigiumcertified_asteriskMatch11.6cert1_rc2
ORdigiumcertified_asteriskMatch11.6cert2
ORdigiumcertified_asteriskMatch11.6.0-
ORdigiumcertified_asteriskMatch11.6.0rc1
ORdigiumcertified_asteriskMatch11.6.0rc2
| CPE | Name | Operator | Version |
|---|---|---|---|
| digium:certified_asterisk | digium certified asterisk | eq | 1.8.15 |
Related
checkpoint_advisories
checkpoint_advisories
Digium Asterisk HTTP Connections Denial of Service (CVE-2014-4047)
2014-10-29 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: asterisk-11.10.2-2.fc20
2014-09-19 10:05:48
[SECURITY] Fedora 19 Update: asterisk-11.10.2-2.fc19
2014-09-19 10:11:34
prion
prion
Denial of service
2014-06-17 14:55:00
nessus
nessus
Fedora 20 : asterisk-11.10.2-2.fc20 (2014-7551)
2014-09-22 00:00:00
Asterisk HTTP Session Handling DoS (AST-2014-007)
2014-06-17 00:00:00
Fedora 19 : asterisk-11.10.2-2.fc19 (2014-7570)
2014-09-22 00:00:00
openvas
openvas
Fedora Update for asterisk FEDORA-2014-7570
2014-09-20 00:00:00
Fedora Update for asterisk FEDORA-2014-7551
2014-09-20 00:00:00
Mageia: Security Advisory (MGASA-2014-0300)
2022-01-28 00:00:00
ubuntucve
ubuntucve
CVE-2014-4047
2014-06-17 00:00:00
securityvulns
securityvulns
AST-2014-007: Exhaustion of Allowed Concurrent HTTP Connections
2014-06-13 00:00:00
Asterisk multiple security vulnerabilities
2014-06-13 00:00:00
nvd
nvd
CVE-2014-4047
2014-06-17 14:55:07
debiancve
debiancve
CVE-2014-4047
2014-06-17 14:55:07
cvelist
cvelist
CVE-2014-4047
2014-06-17 14:00:00
mageia
mageia
Updated asterisk packages fix security vulnerabilities
2014-07-26 16:52:06
freebsd
freebsd
asterisk -- multiple vulnerabilities
2014-06-12 00:00:00
gentoo
gentoo
Asterisk: Multiple vulnerabilities
2014-06-25 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.5 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
81.2%
Related for CVE-2014-4047