Lucene search

[email protected]NVD:CVE-2014-6610

HistoryNov 26, 2014 - 3:59 p.m.

CVE-2014-6610

2014-11-2615:59:02

CWE-19

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

AI Score

6.1

Confidence

High

EPSS

0.002

Percentile

59.5%

JSON

Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the res_fax_spandsp module, allows remote authenticated users to cause a denial of service (crash) via an out of call message, which is not properly handled in the ReceiveFax dialplan application.

Affected configurations

Nvd

Node

digiumcertified_asteriskMatch11.6cert1lts

digiumcertified_asteriskMatch11.6cert2lts

digiumcertified_asteriskMatch11.6cert3lts

digiumcertified_asteriskMatch11.6cert4lts

digiumcertified_asteriskMatch11.6cert5lts

digiumcertified_asteriskMatch11.6.0lts

Node

digiumasteriskMatch11.0.0

digiumasteriskMatch11.0.0beta1

digiumasteriskMatch11.0.0beta2

digiumasteriskMatch11.0.0rc1

digiumasteriskMatch11.0.0rc2

digiumasteriskMatch11.1.0

digiumasteriskMatch11.1.0rc1

digiumasteriskMatch11.1.0rc2

digiumasteriskMatch11.1.0rc3

digiumasteriskMatch11.2.0

digiumasteriskMatch11.2.0rc1

digiumasteriskMatch11.2.0rc2

digiumasteriskMatch11.3.0rc1

digiumasteriskMatch11.3.0rc2

digiumasteriskMatch11.4.0

digiumasteriskMatch11.4.0rc1

digiumasteriskMatch11.4.0rc2

digiumasteriskMatch11.4.0rc3

digiumasteriskMatch11.4.0rc4

digiumasteriskMatch11.5.0

digiumasteriskMatch11.5.0rc1

digiumasteriskMatch11.5.0rc2

digiumasteriskMatch11.6.0

digiumasteriskMatch11.6.0rc1

digiumasteriskMatch11.6.0rc2

digiumasteriskMatch11.7.0

digiumasteriskMatch11.7.0rc1

digiumasteriskMatch11.7.0rc2

digiumasteriskMatch11.8.0

digiumasteriskMatch11.8.0rc1

digiumasteriskMatch11.8.0rc2

digiumasteriskMatch11.8.0rc3

digiumasteriskMatch11.9.0

digiumasteriskMatch11.9.0rc1

digiumasteriskMatch11.9.0rc2

digiumasteriskMatch11.9.0rc3

digiumasteriskMatch11.10.0

digiumasteriskMatch11.10.0rc1

digiumasteriskMatch11.11.0

digiumasteriskMatch11.11.0rc1

digiumasteriskMatch11.12.0

digiumasteriskMatch12.0.0

digiumasteriskMatch12.1.0

digiumasteriskMatch12.1.0rc1

digiumasteriskMatch12.1.0rc2

digiumasteriskMatch12.1.0rc3

digiumasteriskMatch12.2.0

digiumasteriskMatch12.2.0rc1

digiumasteriskMatch12.2.0rc2

digiumasteriskMatch12.2.0rc3

digiumasteriskMatch12.3.0

digiumasteriskMatch12.3.0rc1

digiumasteriskMatch12.3.0rc2

digiumasteriskMatch12.4.0

digiumasteriskMatch12.4.0rc1

digiumasteriskMatch12.5.0

digiumasteriskMatch12.5.0rc1

VendorProductVersionCPE
digiumcertified_asterisk11.6cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:lts:*:*:*
digiumcertified_asterisk11.6cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:lts:*:*:*
digiumcertified_asterisk11.6cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:lts:*:*:*
digiumcertified_asterisk11.6cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:lts:*:*:*
digiumcertified_asterisk11.6cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:lts:*:*:*
digiumcertified_asterisk11.6.0cpe:2.3:a:digium:certified_asterisk:11.6.0:*:*:*:lts:*:*:*
digiumasterisk11.0.0cpe:2.3:a:digium:asterisk:11.0.0:*:*:*:*:*:*:*
digiumasterisk11.0.0cpe:2.3:a:digium:asterisk:11.0.0:beta1:*:*:*:*:*:*
digiumasterisk11.0.0cpe:2.3:a:digium:asterisk:11.0.0:beta2:*:*:*:*:*:*
digiumasterisk11.0.0cpe:2.3:a:digium:asterisk:11.0.0:rc1:*:*:*:*:*:*

Vendor	Product	Version	CPE
digium	certified_asterisk	11.6	cpe:2.3:a:digium:certified_asterisk:11.6:cert1:::lts:::*
digium	certified_asterisk	11.6	cpe:2.3:a:digium:certified_asterisk:11.6:cert2:::lts:::*
digium	certified_asterisk	11.6	cpe:2.3:a:digium:certified_asterisk:11.6:cert3:::lts:::*
digium	certified_asterisk	11.6	cpe:2.3:a:digium:certified_asterisk:11.6:cert4:::lts:::*
digium	certified_asterisk	11.6	cpe:2.3:a:digium:certified_asterisk:11.6:cert5:::lts:::*
digium	certified_asterisk	11.6.0	cpe:2.3:a:digium:certified_asterisk:11.6.0::::lts:::
digium	asterisk	11.0.0	cpe:2.3:a:digium:asterisk:11.0.0:::::::*
digium	asterisk	11.0.0	cpe:2.3:a:digium:asterisk:11.0.0:beta1::::::
digium	asterisk	11.0.0	cpe:2.3:a:digium:asterisk:11.0.0:beta2::::::
digium	asterisk	11.0.0	cpe:2.3:a:digium:asterisk:11.0.0:rc1::::::