Lucene search

K
mageiaGentoo FoundationMGASA-2015-0010
HistoryJan 07, 2015 - 7:32 p.m.

Updated asterisk packages fix CVE-2014-9374

2015-01-0719:32:10
Gentoo Foundation
advisories.mageia.org
9

0.035 Low

EPSS

Percentile

91.5%

Updated asterisk packages fix security vulnerability: Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open Source 11.x before 11.14.2 allows remote attackers to cause a denial of service (crash) by sending a zero length frame after a non-zero length frame (CVE-2014-9374).

OSVersionArchitecturePackageVersionFilename
Mageia4noarchasterisk< 11.14.2-1asterisk-11.14.2-1.mga4

0.035 Low

EPSS

Percentile

91.5%