7.5
CVE-2014-2286
- EPSS 46.21%
- Published 18.04.2014 22:14:37
- Last modified 12.04.2025 10:46:40
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2, allows remote attackers to cause a denial of service (stack consumption) and possibly execute arbitrary code via an HTTP request with a large number of Cookie headers.
Data is provided by the National Vulnerability Database (NVD)
Fedoraproject ≫ Fedora Version19
Fedoraproject ≫ Fedora Version20
Digium ≫ Certified Asterisk Version1.8.0.0 Update-
Digium ≫ Certified Asterisk Version1.8.0.0 Updatebeta1
Digium ≫ Certified Asterisk Version1.8.0.0 Updatebeta2
Digium ≫ Certified Asterisk Version1.8.0.0 Updatebeta3
Digium ≫ Certified Asterisk Version1.8.0.0 Updatebeta4
Digium ≫ Certified Asterisk Version1.8.0.0 Updatebeta5
Digium ≫ Certified Asterisk Version1.8.0.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.0.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.0.0 Updaterc3
Digium ≫ Certified Asterisk Version1.8.0.0 Updaterc4
Digium ≫ Certified Asterisk Version1.8.0.0 Updaterc5
Digium ≫ Certified Asterisk Version1.8.1.0 Update-
Digium ≫ Certified Asterisk Version1.8.1.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.2.0 Update-
Digium ≫ Certified Asterisk Version1.8.2.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.3.0 Update-
Digium ≫ Certified Asterisk Version1.8.3.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.3.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.3.0 Updaterc3
Digium ≫ Certified Asterisk Version1.8.4.0 Update-
Digium ≫ Certified Asterisk Version1.8.4.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.4.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.4.0 Updaterc3
Digium ≫ Certified Asterisk Version1.8.5.0 Update-
Digium ≫ Certified Asterisk Version1.8.5.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.6.0 Update-
Digium ≫ Certified Asterisk Version1.8.6.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.6.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.6.0 Updaterc3
Digium ≫ Certified Asterisk Version1.8.7.0 Update-
Digium ≫ Certified Asterisk Version1.8.7.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.7.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.8.0 Update-
Digium ≫ Certified Asterisk Version1.8.8.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.8.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.8.0 Updaterc3
Digium ≫ Certified Asterisk Version1.8.8.0 Updaterc4
Digium ≫ Certified Asterisk Version1.8.8.0 Updaterc5
Digium ≫ Certified Asterisk Version1.8.9.0 Update-
Digium ≫ Certified Asterisk Version1.8.9.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.9.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.9.0 Updaterc3
Digium ≫ Certified Asterisk Version1.8.10.0 Update-
Digium ≫ Certified Asterisk Version1.8.10.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.10.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.10.0 Updaterc3
Digium ≫ Certified Asterisk Version1.8.10.0 Updaterc4
Digium ≫ Certified Asterisk Version1.8.11.0 Update-
Digium ≫ Certified Asterisk Version1.8.11.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.11.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.11.0 Updaterc3
Digium ≫ Certified Asterisk Version1.8.12.0 Update-
Digium ≫ Certified Asterisk Version1.8.12.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.12.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.12.0 Updaterc3
Digium ≫ Certified Asterisk Version1.8.13.0 Update-
Digium ≫ Certified Asterisk Version1.8.13.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.13.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.14.0 Updaterc1
Digium ≫ Certified Asterisk Version1.8.14.0 Updaterc2
Digium ≫ Certified Asterisk Version1.8.15 Update-
Digium ≫ Certified Asterisk Version1.8.15 Updatecert1
Digium ≫ Certified Asterisk Version1.8.15 Updatecert1_rc1
Digium ≫ Certified Asterisk Version1.8.15 Updatecert1_rc2
Digium ≫ Certified Asterisk Version1.8.15 Updatecert1_rc3
Digium ≫ Certified Asterisk Version1.8.15 Updatecert2
Digium ≫ Certified Asterisk Version1.8.15 Updatecert3
Digium ≫ Certified Asterisk Version1.8.15 Updatecert4
Digium ≫ Certified Asterisk Version11.6 Updatecert1
Digium ≫ Certified Asterisk Version11.6 Updatecert1_rc1
Digium ≫ Certified Asterisk Version11.6 Updatecert1_rc2
Digium ≫ Certified Asterisk Version11.6.0 Update-
Digium ≫ Certified Asterisk Version11.6.0 Updaterc1
Digium ≫ Certified Asterisk Version11.6.0 Updaterc2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 46.21% | 0.973 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.