CVE-2014-4048
17.06.2014, 14:55
The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is complete, which triggers a SIP transaction timeout.Enginsight
| Vendor | Product | Version |
|---|---|---|
| digium | asterisk | 𝑥 ≤ 12.3.0 |
| digium | asterisk | 12.0.0 |
| digium | asterisk | 12.1.0 |
| digium | asterisk | 12.1.0:rc1 |
| digium | asterisk | 12.1.0:rc2 |
| digium | asterisk | 12.1.0:rc3 |
| digium | asterisk | 12.1.1 |
| digium | asterisk | 12.2.0 |
| digium | asterisk | 12.2.0:rc1 |
| digium | asterisk | 12.2.0:rc2 |
| digium | asterisk | 12.2.0:rc3 |
| digium | asterisk | 12.3.0:rc1 |
| digium | asterisk | 12.3.0:rc2 |
𝑥
= Vulnerable software versions
Debian Releases
References