Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-8413HistoryNov 24, 2014 - 3:59 p.m.
CVE-2014-8413
2014-11-2415:59:05
Debian Security Bug Tracker
security-tracker.debian.org
7
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.9%
The res_pjsip_acl module in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 does not properly create and load ACLs defined in pjsip.conf at startup, which allows remote attackers to bypass intended PJSIP ACL rules.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | asterisk | < 1:13.1.0~dfsg-1 | asterisk_1:13.1.0~dfsg-1_all.deb |
| Debian | 999 | all | asterisk | < 1:13.1.0~dfsg-1 | asterisk_1:13.1.0~dfsg-1_all.deb |
Related
cve
cve
CVE-2014-8413
2014-11-24 15:59:05
nvd
nvd
CVE-2014-8413
2014-11-24 15:59:05
ubuntucve
ubuntucve
CVE-2014-8413
2014-11-24 00:00:00
prion
prion
Design/Logic Flaw
2014-11-24 15:59:00
cvelist
cvelist
CVE-2014-8413
2014-11-24 15:00:00
nessus
nessus
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.9%
Related for DEBIANCVE:CVE-2014-8413