CVE-2014-4047 - CVE House

Status published Medium CVE-2014-4047

Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and...

5 CVSS

Vulnerability Description

Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 before 1.8.15-cert6 and 11.6 before 11.6-cert3 allows remote attackers to cause a denial of service (connection consumption) via a large number of (1) inactive or (2) incomplete HTTP connections.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-4047

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from digium

View All →

CVE-2022-26651

An issue was discovered in Asterisk through 19.x and Certified...

Critical 9.8

CVE-2022-26499

An SSRF issue was discovered in Asterisk through 19.x. When...

Critical 9.1

CVE-2022-26498

An issue was discovered in Asterisk through 19.x. When using...

High 7.5

CVE-2021-32558

An issue was discovered in Sangoma Asterisk 13.x before 13.38.3,...

High 7.5

CVE-2021-31878

An issue was discovered in PJSIP in Asterisk before 16.19.1...

Medium 6.5

Affected Vendor

digium

View all reports →

Affected Software

certified asterisk, asterisk

Vulnerable Versions:

1.8.15, 11.6, 11.6.0, 1.8.0, 1.8.1, 1.8.1.1, 1.8.1.2, 1.8.2, 1.8.2.1, 1.8.2.2, 1.8.2.3, 1.8.2.4, 1.8.3, 1.8.3.1, 1.8.3.2, 1.8.3.3, 1.8.4, 1.8.4.1, 1.8.4.2, 1.8.4.3, 1.8.4.4, 1.8.5, 1.8.5.0, 1.8.6.0, 1.8.7.0, 1.8.7.1, 1.8.8.0, 1.8.8.1, 1.8.8.2, 1.8.9.0, 1.8.9.1, 1.8.9.2, 1.8.9.3, 1.8.10.0, 1.8.10.1, 1.8.11.0, 1.8.11.1, 1.8.12, 1.8.12.0, 1.8.12.1, 1.8.12.2, 1.8.13.0, 1.8.13.1, 1.8.14.0, 1.8.14.1, 1.8.15.0, 1.8.15.1, 1.8.16.0, 1.8.17.0, 1.8.18.0, 1.8.18.1, 1.8.19.0, 1.8.19.1, 1.8.20.0, 1.8.20.1, 1.8.20.2, 1.8.21.0, 1.8.22.0, 1.8.23.0, 1.8.23.1, 1.8.24.0, 1.8.24.1, 1.8.25.0, 1.8.26.0, 1.8.26.1, 1.8.27.0, 1.8.28.0, 12.0.0, 12.1.0, 12.1.1, 12.2.0, 12.3.0, 11.0.0, 11.0.1, 11.0.2, 11.1.0, 11.1.1, 11.1.2, 11.2.0, 11.3.0, 11.4.0, 11.5.0, 11.5.1, 11.8.0, 11.8.1, 11.9.0, 11.10.0

Timeline

Official Publish: June 17th, 2014

Last Modified: August 6th, 2024

Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.