← Back

CVE-2014-6609

nvd nist
Published: Nov 26, 2014Modified: May 6, 2026

JSON object

Loading...
4.0
Vector
AV:N/AC:L/Au:S/C:N/I:N/A:P
Exploitability: 8.0 / Impact: 2.9
Source: NVD

Description

The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service (crash) via crafted headers in a SIP SUBSCRIBE request for an event package.

Affected (16)

Products: Digium: Asterisk
Digium
1 product
Asterisk
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Digium
Asterisk
Version 12.0.0
Asterisk
Version 12.1.0
Asterisk
Version 12.1.0 rc1
Asterisk
Version 12.1.0 rc2
Asterisk
Version 12.1.0 rc3
Asterisk
Version 12.2.0
Asterisk
Version 12.2.0 rc1
Asterisk
Version 12.2.0 rc2
Asterisk
Version 12.2.0 rc3
Asterisk
Version 12.3.0
Asterisk
Version 12.3.0 rc1
Asterisk
Version 12.3.0 rc2
Asterisk
Version 12.4.0
Asterisk
Version 12.4.0 rc1
Asterisk
Version 12.5.0
Asterisk
Version 12.5.0 rc1

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.