CVE-2014-4048

Published: Jun 17, 2014Modified: May 6, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is complete, which triggers a SIP transaction timeout.

Affected (13)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Up to 12.3.0
Digium Asterisk	Version 12.0.0
Digium Asterisk	Version 12.1.0
Digium Asterisk	Version 12.1.0 rc1
Digium Asterisk	Version 12.1.0 rc2
Digium Asterisk	Version 12.1.0 rc3
Digium Asterisk	Version 12.1.1
Digium Asterisk	Version 12.2.0
Digium Asterisk	Version 12.2.0 rc1
Digium Asterisk	Version 12.2.0 rc2
Digium Asterisk	Version 12.2.0 rc3
Digium Asterisk	Version 12.3.0 rc1
Digium Asterisk	Version 12.3.0 rc2

References (6)

http://downloads.asterisk.org/pub/security/AST-2014-008.html

Source: cve@mitre.org

PatchVendor Advisory

http://packetstormsecurity.com/files/127090/Asterisk-Project-Security-Advisory-AST-2014-008.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/532416/100/0/threaded

Source: cve@mitre.org

http://downloads.asterisk.org/pub/security/AST-2014-008.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://packetstormsecurity.com/files/127090/Asterisk-Project-Security-Advisory-AST-2014-008.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/532416/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.