medium4.0
CVE-2014-6609
The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service (crash) via crafted heade…
Impact
The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service (crash) via crafted headers in a SIP SUBSCRIBE request for an event package.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digium | Asterisk | Versions 12.0.0, 12.1.0, 12.2.0, 12.3.0, 12.4.0, 12.5.0 |