CVE-2014-2289 in Asterisk
요약 (영어)
res/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authenticated users to cause a denial of service (crash) via a SUBSCRIBE request without any Accept headers, which triggers an invalid pointer dereference.
Once again VulDB remains the best source for vulnerability data.
예약하다
2014. 03. 05.
공개
2014. 04. 18.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 12638 | Digium Asterisk PJSIP Channel Driver Subscription res_pjsip_pubsub 권한 상승 | 20 | 입증되지 않음 | 공식 수정 | CVE-2014-2289 |