Lucene search

MitreCVE-2014-8415

HistoryNov 24, 2014 - 3:59 p.m.

CVE-2014-8415

2014-11-2415:59:07

CWE-20

mitre

web.nvd.nist.gov

cve

asterisk

open source

12.x

13.x

remote attackers

denial of service

nvd

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.008

Percentile

82.2%

JSON

Race condition in the chan_pjsip channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a cancel request for a SIP session with a queued action to (1) answer a session or (2) send ringing.

Affected configurations

Nvd

Node

digiumasteriskRange12.0.0–12.7.1

digiumasteriskRange13.0.0–13.0.1

VendorProductVersionCPE
digiumasterisk*cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
digium	asterisk	*	cpe:2.3:a:digium:asterisk::::::::

References

downloads.asterisk.org/pub/security/AST-2014-015.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.008

Percentile

82.2%

JSON

Related for CVE-2014-8415