Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2014-9374

Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open Source 11.x before 11.14.2, 12.x before 12.7.2, and 13.x before 13.0.2 and Certified Asterisk 11.6 before 11.6-cert9 allows remote attackers to cause a denial of service (crash) by sending a zero length frame after a non-zero length frame.

Published

2014-12-12T15:59:14.883

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.0 (MEDIUM)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

10.0

Impact Score

2.9

Weaknesses
  • Type: Primary
    NVD-CWE-Other
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application digium certified_asterisk 11.6 Yes
Application digium certified_asterisk 11.6 Yes
Application digium certified_asterisk 11.6 Yes
Application digium certified_asterisk 11.6 Yes
Application digium certified_asterisk 11.6 Yes
Application digium certified_asterisk 11.6 Yes
Application digium certified_asterisk 11.6 Yes
Application digium certified_asterisk 11.6 Yes
Application digium certified_asterisk 11.6.0 Yes
Application digium asterisk 11.0.0 Yes
Application digium asterisk 11.0.0 Yes
Application digium asterisk 11.0.0 Yes
Application digium asterisk 11.0.0 Yes
Application digium asterisk 11.0.0 Yes
Application digium asterisk 11.1.0 Yes
Application digium asterisk 11.1.0 Yes
Application digium asterisk 11.1.0 Yes
Application digium asterisk 11.1.0 Yes
Application digium asterisk 11.2.0 Yes
Application digium asterisk 11.2.0 Yes
Application digium asterisk 11.2.0 Yes
Application digium asterisk 11.3.0 Yes
Application digium asterisk 11.3.0 Yes
Application digium asterisk 11.4.0 Yes
Application digium asterisk 11.4.0 Yes
Application digium asterisk 11.4.0 Yes
Application digium asterisk 11.4.0 Yes
Application digium asterisk 11.4.0 Yes
Application digium asterisk 11.5.0 Yes
Application digium asterisk 11.5.0 Yes
Application digium asterisk 11.5.0 Yes
Application digium asterisk 11.6.0 Yes
Application digium asterisk 11.6.0 Yes
Application digium asterisk 11.6.0 Yes
Application digium asterisk 11.7.0 Yes
Application digium asterisk 11.7.0 Yes
Application digium asterisk 11.7.0 Yes
Application digium asterisk 11.8.0 Yes
Application digium asterisk 11.8.0 Yes
Application digium asterisk 11.8.0 Yes
Application digium asterisk 11.8.0 Yes
Application digium asterisk 11.9.0 Yes
Application digium asterisk 11.9.0 Yes
Application digium asterisk 11.9.0 Yes
Application digium asterisk 11.9.0 Yes
Application digium asterisk 11.10.0 Yes
Application digium asterisk 11.10.0 Yes
Application digium asterisk 11.11.0 Yes
Application digium asterisk 11.11.0 Yes
Application digium asterisk 11.12.0 Yes
Application digium asterisk 11.12.0 Yes
Application digium asterisk 11.13.0 Yes
Application digium asterisk 11.13.0 Yes
Application digium asterisk 11.14.0 Yes
Application digium asterisk 11.14.0 Yes
Application digium asterisk 11.14.0 Yes
Application digium asterisk 12.0.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.1.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.2.0 Yes
Application digium asterisk 12.3.0 Yes
Application digium asterisk 12.3.0 Yes
Application digium asterisk 12.3.0 Yes
Application digium asterisk 12.4.0 Yes
Application digium asterisk 12.4.0 Yes
Application digium asterisk 12.5.0 Yes
Application digium asterisk 12.5.0 Yes
Application digium asterisk 12.6.0 Yes
Application digium asterisk 12.6.0 Yes
Application digium asterisk 12.7.0 Yes
Application digium asterisk 12.7.0 Yes
Application digium asterisk 12.7.0 Yes
Application digium asterisk 12.7.1 Yes
Application digium asterisk 13.0.0 Yes
Application digium asterisk 13.0.1 Yes
References