Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-6609

The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service (crash) via crafted headers in a SIP SUBSCRIBE request for an event package.

Published

2014-11-26T15:59:01.447

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application digium asterisk 12.0.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.3.0 Yes
Application digium asterisk 12.3.0 Yes
Application digium asterisk 12.3.0 Yes
Application digium asterisk 12.4.0 Yes
Application digium asterisk 12.4.0 Yes
Application digium asterisk 12.5.0 Yes
Application digium asterisk 12.5.0 Yes
References