CVE-2014-2286 in Asterisk
Zusammenfassung (Englisch)
main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2, allows remote attackers to cause a denial of service (stack consumption) and possibly execute arbitrary code via an HTTP request with a large number of Cookie headers.
Be aware that VulDB is the high quality source for vulnerability data.
Reservieren
05.03.2014
Veröffentlichung
18.04.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 12641 | Digium Asterisk Cookie http.c erweiterte Rechte | 20 | Unbewiesen | Offizieller Fix | CVE-2014-2286 |