{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2014-06-12T00:00:00", "descriptions": [{"lang": "en", "value": "The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is complete, which triggers a SIP transaction timeout."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-09T18:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20140612 AST-2014-008: Denial of Service in PJSIP Channel Driver Subscriptions", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/532416/100/0/threaded"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/127090/Asterisk-Project-Security-Advisory-AST-2014-008.html"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://downloads.asterisk.org/pub/security/AST-2014-008.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2014-4048", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is complete, which triggers a SIP transaction timeout."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20140612 AST-2014-008: Denial of Service in PJSIP Channel Driver Subscriptions", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/532416/100/0/threaded"}, {"name": "http://packetstormsecurity.com/files/127090/Asterisk-Project-Security-Advisory-AST-2014-008.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/127090/Asterisk-Project-Security-Advisory-AST-2014-008.html"}, {"name": "http://downloads.asterisk.org/pub/security/AST-2014-008.html", "refsource": "CONFIRM", "url": "http://downloads.asterisk.org/pub/security/AST-2014-008.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-06T11:04:28.479Z"}, "title": "CVE Program Container", "references": [{"name": "20140612 AST-2014-008: Denial of Service in PJSIP Channel Driver Subscriptions", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/532416/100/0/threaded"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://packetstormsecurity.com/files/127090/Asterisk-Project-Security-Advisory-AST-2014-008.html"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://downloads.asterisk.org/pub/security/AST-2014-008.html"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2014-4048", "datePublished": "2014-06-17T14:00:00", "dateReserved": "2014-06-12T00:00:00", "dateUpdated": "2024-08-06T11:04:28.479Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*", "matchCriteriaId": "63CB4F59-5EE5-4767-8303-090CCF64C185", "versionEndIncluding": "12.3.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "B446105E-6C8E-495A-BF83-A33CB33485A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.1.0:-:*:*:*:*:*:*", "matchCriteriaId": "F3DE062D-4E87-4691-A664-D9E7C02036EB", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.1.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "3B4D6D24-A718-4962-AD4E-F19AFB03BFF4", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.1.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "BE2F0D0D-761C-4338-93F0-506E94E57000", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.1.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "3D38DFCA-E357-4A28-8F03-FDADF40A5185", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "B3CD4A85-26FB-4AE5-9CB7-4DF38DF32482", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "F42C9442-9EBC-4CA5-AB1C-BA0662C27BDC", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.2.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "71762B58-A08B-405B-9596-6D15CF4A95D0", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.2.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "EA48C05A-E898-42EE-A699-94BBD66E5E0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.2.0:rc3:*:*:*:*:*:*", "matchCriteriaId": "EDCB78F8-AAC8-44B1-BDF4-C73BC8951EC3", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.3.0:rc1:*:*:*:*:*:*", "matchCriteriaId": "DB5E92FB-9CF8-461E-A665-3407D265DF17", "vulnerable": true}, {"criteria": "cpe:2.3:a:digium:asterisk:12.3.0:rc2:*:*:*:*:*:*", "matchCriteriaId": "536F6C10-3165-40F7-931A-23765AB87555", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is complete, which triggers a SIP transaction timeout."}, {"lang": "es", "value": "El controlador de canales PJSIP en Asterisk Open Source anterior a 12.3.1 permite a atacantes remotos causar una denegaci\u00f3n de servicio (bloqueo) mediante la terminaci\u00f3n de una solicitud de suscripci\u00f3n antes de que se haya completado, lo que provoca un timeout de la transacci\u00f3n SIP."}], "id": "CVE-2014-4048", "lastModified": "2018-10-09T19:47:34.937", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2014-06-17T14:55:08.017", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://downloads.asterisk.org/pub/security/AST-2014-008.html"}, {"source": "cve@mitre.org", "url": "http://packetstormsecurity.com/files/127090/Asterisk-Project-Security-Advisory-AST-2014-008.html"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/532416/100/0/threaded"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}