CVE-2014-4045 in Digium Asterisk
요약 (영어)
The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before 12.3.1, when sub_min_expiry is set to zero, allows remote attackers to cause a denial of service (assertion failure and crash) via an unsubscribe request when not subscribed to the device.
예약하다
2014. 06. 12.
공개
2014. 06. 17.
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 13588 | Digium Asterisk PJSIP Channel Driver Subscription 서비스 거부 | 189 | 입증되지 않음 | 공식 수정 | CVE-2014-4045 |