CVE-2014-4045

Published: Jun 17, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before 12.3.1, when sub_min_expiry is set to zero, allows remote attackers to cause a denial of service (assertion failure and crash) via an unsubscribe request when not subscribed to the device.

Affected (13)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 12.0.0
Digium Asterisk	Version 12.1.0
Digium Asterisk	Version 12.1.0 rc1
Digium Asterisk	Version 12.1.0 rc2
Digium Asterisk	Version 12.1.0 rc3
Digium Asterisk	Version 12.1.1
Digium Asterisk	Version 12.2.0
Digium Asterisk	Version 12.2.0 rc1
Digium Asterisk	Version 12.2.0 rc2
Digium Asterisk	Version 12.2.0 rc3
Digium Asterisk	Version 12.3.0
Digium Asterisk	Version 12.3.0 rc1
Digium Asterisk	Version 12.3.0 rc2