CVE-2014-8416

Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer…

published November 24, 2014

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote attackers to cause a denial of service (crash) via an in-dialog INVITE with Replaces message, which triggers the channel to be hung up.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04310 · 91.1th percentile
Published
2014-11-24T15:00Z
EPSS history
Timeline
  • 24 NOV 15:00Z
    Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer…
    cvelistv5