CVE-2014-6610
Mandriva Linux Security Advisory 2014-218
Severity Score
6.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the res_fax_spandsp module, allows remote authenticated users to cause a denial of service (crash) via an out of call message, which is not properly handled in the ReceiveFax dialplan application.
Asterisk Open Source 11.x anterior a 11.12.1 y 12.x anterior a 12.5.1 y Certified Asterisk 11.6 anterior a 11.6-cert6, cuando utilizan el módulo res_fax_spandsp, permiten a usuarios remotos autenticados causar una denegación de servicio (caída) a través de un mensaje fuera de llamada (out of call), lo que no se maneja correctamente en la aplicación ReceiveFax dialplan.
Multiple vulnerabilities have been discovered and corrected in asterisk. The updated packages has been upgraded to the 11.14.1 version which is not vulnerable to these issues.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-09-18 CVE Reserved
- 2014-11-21 CVE Published
- 2024-08-06 CVE Updated
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-19: Data Processing Errors
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://downloads.asterisk.org/pub/security/AST-2014-010.html | 2014-11-26 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.6 Search vendor "Digium" for product "Certified Asterisk" and version "11.6" | cert1, lts |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.6 Search vendor "Digium" for product "Certified Asterisk" and version "11.6" | cert2, lts |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.6 Search vendor "Digium" for product "Certified Asterisk" and version "11.6" | cert3, lts |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.6 Search vendor "Digium" for product "Certified Asterisk" and version "11.6" | cert4, lts |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.6 Search vendor "Digium" for product "Certified Asterisk" and version "11.6" | cert5, lts |
Affected
| ||||||
| Digium Search vendor "Digium" | Certified Asterisk Search vendor "Digium" for product "Certified Asterisk" | 11.6.0 Search vendor "Digium" for product "Certified Asterisk" and version "11.6.0" | lts |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | beta1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | beta2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.0.0 Search vendor "Digium" for product "Asterisk" and version "11.0.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.1.0 Search vendor "Digium" for product "Asterisk" and version "11.1.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.1.0 Search vendor "Digium" for product "Asterisk" and version "11.1.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.1.0 Search vendor "Digium" for product "Asterisk" and version "11.1.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.1.0 Search vendor "Digium" for product "Asterisk" and version "11.1.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.2.0 Search vendor "Digium" for product "Asterisk" and version "11.2.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.2.0 Search vendor "Digium" for product "Asterisk" and version "11.2.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.2.0 Search vendor "Digium" for product "Asterisk" and version "11.2.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.3.0 Search vendor "Digium" for product "Asterisk" and version "11.3.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.3.0 Search vendor "Digium" for product "Asterisk" and version "11.3.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.4.0 Search vendor "Digium" for product "Asterisk" and version "11.4.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.4.0 Search vendor "Digium" for product "Asterisk" and version "11.4.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.4.0 Search vendor "Digium" for product "Asterisk" and version "11.4.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.4.0 Search vendor "Digium" for product "Asterisk" and version "11.4.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.4.0 Search vendor "Digium" for product "Asterisk" and version "11.4.0" | rc4 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.5.0 Search vendor "Digium" for product "Asterisk" and version "11.5.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.5.0 Search vendor "Digium" for product "Asterisk" and version "11.5.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.5.0 Search vendor "Digium" for product "Asterisk" and version "11.5.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.6.0 Search vendor "Digium" for product "Asterisk" and version "11.6.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.6.0 Search vendor "Digium" for product "Asterisk" and version "11.6.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.6.0 Search vendor "Digium" for product "Asterisk" and version "11.6.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.7.0 Search vendor "Digium" for product "Asterisk" and version "11.7.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.7.0 Search vendor "Digium" for product "Asterisk" and version "11.7.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.7.0 Search vendor "Digium" for product "Asterisk" and version "11.7.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.8.0 Search vendor "Digium" for product "Asterisk" and version "11.8.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.8.0 Search vendor "Digium" for product "Asterisk" and version "11.8.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.8.0 Search vendor "Digium" for product "Asterisk" and version "11.8.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.8.0 Search vendor "Digium" for product "Asterisk" and version "11.8.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.9.0 Search vendor "Digium" for product "Asterisk" and version "11.9.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.9.0 Search vendor "Digium" for product "Asterisk" and version "11.9.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.9.0 Search vendor "Digium" for product "Asterisk" and version "11.9.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.9.0 Search vendor "Digium" for product "Asterisk" and version "11.9.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.10.0 Search vendor "Digium" for product "Asterisk" and version "11.10.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.10.0 Search vendor "Digium" for product "Asterisk" and version "11.10.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.11.0 Search vendor "Digium" for product "Asterisk" and version "11.11.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.11.0 Search vendor "Digium" for product "Asterisk" and version "11.11.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 11.12.0 Search vendor "Digium" for product "Asterisk" and version "11.12.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.0.0 Search vendor "Digium" for product "Asterisk" and version "12.0.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.1.0 Search vendor "Digium" for product "Asterisk" and version "12.1.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.1.0 Search vendor "Digium" for product "Asterisk" and version "12.1.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.1.0 Search vendor "Digium" for product "Asterisk" and version "12.1.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.1.0 Search vendor "Digium" for product "Asterisk" and version "12.1.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.2.0 Search vendor "Digium" for product "Asterisk" and version "12.2.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.2.0 Search vendor "Digium" for product "Asterisk" and version "12.2.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.2.0 Search vendor "Digium" for product "Asterisk" and version "12.2.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.2.0 Search vendor "Digium" for product "Asterisk" and version "12.2.0" | rc3 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.3.0 Search vendor "Digium" for product "Asterisk" and version "12.3.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.3.0 Search vendor "Digium" for product "Asterisk" and version "12.3.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.3.0 Search vendor "Digium" for product "Asterisk" and version "12.3.0" | rc2 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.4.0 Search vendor "Digium" for product "Asterisk" and version "12.4.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.4.0 Search vendor "Digium" for product "Asterisk" and version "12.4.0" | rc1 |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.5.0 Search vendor "Digium" for product "Asterisk" and version "12.5.0" | - |
Affected
| ||||||
| Digium Search vendor "Digium" | Asterisk Search vendor "Digium" for product "Asterisk" | 12.5.0 Search vendor "Digium" for product "Asterisk" and version "12.5.0" | rc1 |
Affected
| ||||||