Digium Asterisk 12.0.0/12.1.0/12.1.1/12.2.0/12.3.0 PJSIP Channel Driver Subscription numeric error
| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 4.6 | $0-$5k | 0.00 |
Summary
A vulnerability categorized as problematic has been discovered in Digium Asterisk 12.0.0/12.1.0/12.1.1/12.2.0/12.3.0. This vulnerability affects unknown code of the component PJSIP Channel Driver Subscription Handler. Executing a manipulation can lead to numeric error. This vulnerability appears as CVE-2014-4045. The attack may be performed from remote. There is no available exploit. It is advisable to upgrade the affected component.
Details
A vulnerability was found in Digium Asterisk 12.0.0/12.1.0/12.1.1/12.2.0/12.3.0 (Communications System). It has been declared as problematic. This vulnerability affects an unknown functionality of the component PJSIP Channel Driver Subscription Handler. The manipulation with an unknown input leads to a numeric error vulnerability. The CWE definition for the vulnerability is CWE-189. As an impact it is known to affect availability.
The weakness was presented 06/12/2014 by John Bigelow with Digium as AST-2014-005 as confirmed advisory (Website). The advisory is shared for download at downloads.asterisk.org. The public release was coordinated in cooperation with the vendor. This vulnerability was named CVE-2014-4045 since 06/12/2014. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are neither technical details nor an exploit publicly available. The advisory points out:
If an attempt is made to unsubscribe when not currently subscribed and the endpoint's “sub_min_expiry” is set to zero, Asterisk tries to create an expiration timer with zero seconds, which is not allowed, so an assertion raised.
The vulnerability was handled as a non-public zero-day exploit for at least 87 days. During that time the estimated underground price was around $0-$5k. The vulnerability scanner Nessus provides a plugin with the ID 76089 (Asterisk PJSIP Channel Driver Multiple DoS Vulnerabilities (AST-2014-005 / AST-2014-008)), which helps to determine the existence of the flaw in a target environment. It is assigned to the family Misc..
Upgrading to version 12.3.1 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at downloads.asterisk.org. It is possible to mitigate the problem by applying the configuration setting sub_min_expiry > 0. The best possible mitigation is suggested to be upgrading to the latest version. A possible mitigation has been published immediately after the disclosure of the vulnerability.
The vulnerability is also documented in the databases at X-Force (93799), Tenable (76089), SecurityFocus (BID 68033†), SecurityTracker (ID 1030425†) and Vulnerability Center (SBV-45086†). Additional details are provided at issues.asterisk.org. See VDB-13591 for similar entry. Once again VulDB remains the best source for vulnerability data.
Product
Type
Vendor
Name
Version
License
Website
- Vendor: https://www.digium.com/
CPE 2.3
CPE 2.2
CVSSv4
VulDB Vector: 🔍VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 4.6
VulDB Base Score: 5.3
VulDB Temp Score: 4.6
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| 💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
| Unlock | Unlock | Unlock | Unlock | Unlock | Unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Numeric errorCWE: CWE-189
CAPEC: 🔍
ATT&CK: 🔍
Physical: No
Local: No
Remote: Yes
Availability: 🔍
Status: Unproven
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | Unlock | Unlock | Unlock | Unlock |
|---|---|---|---|---|
| Today | Unlock | Unlock | Unlock | Unlock |
Nessus ID: 76089
Nessus Name: Asterisk PJSIP Channel Driver Multiple DoS Vulnerabilities (AST-2014-005 / AST-2014-008)
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: UpgradeStatus: 🔍
Reaction Time: 🔍
0-Day Time: 🔍
Exposure Time: 🔍
Upgrade: Asterisk 12.3.1
Patch: downloads.asterisk.org
Config: sub_min_expiry > 0
Timeline
03/17/2014 🔍04/14/2014 🔍
04/14/2014 🔍
06/12/2014 🔍
06/12/2014 🔍
06/12/2014 🔍
06/13/2014 🔍
06/13/2014 🔍
06/17/2014 🔍
06/17/2014 🔍
06/23/2014 🔍
06/22/2021 🔍
Sources
Vendor: digium.comAdvisory: AST-2014-005
Researcher: John Bigelow
Organization: Digium
Status: Confirmed
Confirmation: 🔍
Coordinated: 🔍
CVE: CVE-2014-4045 (🔍)
GCVE (CVE): GCVE-0-2014-4045
GCVE (VulDB): GCVE-100-13588
IAVM: 🔍
X-Force: 93799 - Asterisk PJSIP channel denial of service, Medium Risk
SecurityFocus: 68033 - Asterisk Open Source CVE-2014-4045 Denial of Service Vulnerability
SecurityTracker: 1030425 - Asterisk PJSIP Channel Driver Bug Lets Remote Users Deny Service
Vulnerability Center: 45086 - Asterisk Open Source 12 Remote DoS in PJSIP Channel Driver, Medium
Misc.: 🔍
See also: 🔍
Entry
Created: 06/13/2014 17:36Updated: 06/22/2021 20:59
Changes: 06/13/2014 17:36 (90), 12/24/2017 09:41 (2), 06/22/2021 20:51 (3), 06/22/2021 20:59 (1)
Complete: 🔍
Cache ID: 216:D55:103
No comments yet. Languages: en.
Please log in to comment.