Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the res_fax_spandsp module, allows remote authenticated users to cause a denial of service (crash) via an out of call message, which is not properly handled in the ReceiveFax dialplan application.
References
Link | Resource |
---|---|
http://downloads.asterisk.org/pub/security/AST-2014-010.html | Patch Vendor Advisory |
http://downloads.asterisk.org/pub/security/AST-2014-010.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 02:14
Type | Values Removed | Values Added |
---|---|---|
References | () http://downloads.asterisk.org/pub/security/AST-2014-010.html - Patch, Vendor Advisory |
Information
Published : 2014-11-26 15:59
Updated : 2024-11-21 02:14
NVD link : CVE-2014-6610
Mitre link : CVE-2014-6610
CVE.ORG link : CVE-2014-6610
JSON object : View
Products Affected
digium
- asterisk
- certified_asterisk
CWE
CWE-19
Data Processing Errors