CVE-2014-4048 in Digium Asterisk
Summary
The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is complete, which triggers a SIP transaction timeout.
Reservation
06/12/2014
Disclosure
06/17/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13591 | Digium Asterisk SIP Timeout deadlock | 833 | Unproven | Official fix | CVE-2014-4048 |