CVE-2014-9374
12.12.2014, 15:59
Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open Source 11.x before 11.14.2, 12.x before 12.7.2, and 13.x before 13.0.2 and Certified Asterisk 11.6 before 11.6-cert9 allows remote attackers to cause a denial of service (crash) by sending a zero length frame after a non-zero length frame.Enginsight
| Vendor | Product | Version |
|---|---|---|
| digium | certified_asterisk | 11.6:cert1 |
| digium | certified_asterisk | 11.6:cert2 |
| digium | certified_asterisk | 11.6:cert3 |
| digium | certified_asterisk | 11.6:cert4 |
| digium | certified_asterisk | 11.6:cert5 |
| digium | certified_asterisk | 11.6:cert6 |
| digium | certified_asterisk | 11.6:cert7 |
| digium | certified_asterisk | 11.6:cert8 |
| digium | certified_asterisk | 11.6.0 |
| digium | asterisk | 11.0.0 |
| digium | asterisk | 11.0.0:beta1 |
| digium | asterisk | 11.0.0:beta2 |
| digium | asterisk | 11.0.0:rc1 |
| digium | asterisk | 11.0.0:rc2 |
| digium | asterisk | 11.1.0 |
| digium | asterisk | 11.1.0:rc1 |
| digium | asterisk | 11.1.0:rc2 |
| digium | asterisk | 11.1.0:rc3 |
| digium | asterisk | 11.2.0 |
| digium | asterisk | 11.2.0:rc1 |
| digium | asterisk | 11.2.0:rc2 |
| digium | asterisk | 11.3.0:rc1 |
| digium | asterisk | 11.3.0:rc2 |
| digium | asterisk | 11.4.0 |
| digium | asterisk | 11.4.0:rc1 |
| digium | asterisk | 11.4.0:rc2 |
| digium | asterisk | 11.4.0:rc3 |
| digium | asterisk | 11.4.0:rc4 |
| digium | asterisk | 11.5.0 |
| digium | asterisk | 11.5.0:rc1 |
| digium | asterisk | 11.5.0:rc2 |
| digium | asterisk | 11.6.0 |
| digium | asterisk | 11.6.0:rc1 |
| digium | asterisk | 11.6.0:rc2 |
| digium | asterisk | 11.7.0 |
| digium | asterisk | 11.7.0:rc1 |
| digium | asterisk | 11.7.0:rc2 |
| digium | asterisk | 11.8.0 |
| digium | asterisk | 11.8.0:rc1 |
| digium | asterisk | 11.8.0:rc2 |
| digium | asterisk | 11.8.0:rc3 |
| digium | asterisk | 11.9.0 |
| digium | asterisk | 11.9.0:rc1 |
| digium | asterisk | 11.9.0:rc2 |
| digium | asterisk | 11.9.0:rc3 |
| digium | asterisk | 11.10.0 |
| digium | asterisk | 11.10.0:rc1 |
| digium | asterisk | 11.11.0 |
| digium | asterisk | 11.11.0:rc1 |
| digium | asterisk | 11.12.0 |
| digium | asterisk | 11.12.0:rc1 |
| digium | asterisk | 11.13.0 |
| digium | asterisk | 11.13.0:rc1 |
| digium | asterisk | 11.14.0 |
| digium | asterisk | 11.14.0:rc1 |
| digium | asterisk | 11.14.0:rc2 |
| digium | asterisk | 12.0.0 |
| digium | asterisk | 12.1.0 |
| digium | asterisk | 12.1.0:rc1 |
| digium | asterisk | 12.1.0:rc2 |
| digium | asterisk | 12.1.0:rc3 |
| digium | asterisk | 12.2.0 |
| digium | asterisk | 12.2.0:rc1 |
| digium | asterisk | 12.2.0:rc2 |
| digium | asterisk | 12.2.0:rc3 |
| digium | asterisk | 12.3.0 |
| digium | asterisk | 12.3.0:rc1 |
| digium | asterisk | 12.3.0:rc2 |
| digium | asterisk | 12.4.0 |
| digium | asterisk | 12.4.0:rc1 |
| digium | asterisk | 12.5.0 |
| digium | asterisk | 12.5.0:rc1 |
| digium | asterisk | 12.6.0 |
| digium | asterisk | 12.6.0:rc1 |
| digium | asterisk | 12.7.0 |
| digium | asterisk | 12.7.0:rc1 |
| digium | asterisk | 12.7.0:rc2 |
| digium | asterisk | 12.7.1 |
| digium | asterisk | 13.0.0 |
| digium | asterisk | 13.0.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References