vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2014-4047

N/A
Published: June 17, 2014 at 02:00 PM UTC
Updated: June 17, 2026 at 12:09 AM UTC
2 products affected across 1 vendorAsteriskCertified Asterisk

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 5%

Description

Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 before 1.8.15-cert6 and 11.6 before 11.6-cert3 allows remote attackers to cause a denial of service (connection consumption) via a large number of (1) inactive or (2) incomplete HTTP connections.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Asterisk· Digium
95%
1.8.01.8.0 beta11.8.0 beta21.8.0 beta31.8.0 beta41.8.0 beta51.8.0 rc21.8.0 rc31.8.0 rc41.8.0 rc51.8.11.8.1 rc11.8.1.11.8.1.21.8.10.01.8.10.0 rc11.8.10.0 rc21.8.10.0 rc31.8.10.0 rc41.8.10.11.8.11.01.8.11.0 patch1.8.11.0 rc21.8.11.0 rc31.8.11.11.8.11.1 patch1.8.121.8.12.01.8.12.0 rc11.8.12.0 rc21.8.12.0 rc31.8.12.11.8.12.21.8.13.01.8.13.0 rc11.8.13.0 rc21.8.13.11.8.14.01.8.14.0 patch1.8.14.0 rc11.8.14.0 rc21.8.14.11.8.14.1 patch1.8.15.01.8.15.0 rc11.8.15.11.8.16.01.8.16.0 rc11.8.16.0 rc21.8.17.01.8.17.0 patch1.8.17.0 rc11.8.17.0 rc21.8.17.0 rc31.8.18.01.8.18.0 rc11.8.18.11.8.19.01.8.19.0 rc11.8.19.0 rc31.8.19.11.8.21.8.2.11.8.2.21.8.2.31.8.2.41.8.20.01.8.20.0 patch1.8.20.0 rc11.8.20.0 rc21.8.20.11.8.20.1 patch1.8.20.21.8.20.2 patch1.8.21.01.8.21.0 rc11.8.21.0 rc21.8.22.01.8.22.0 rc11.8.22.0 rc21.8.23.01.8.23.0 patch1.8.23.0 rc11.8.23.0 rc21.8.23.11.8.24.01.8.24.0 rc11.8.24.0 rc21.8.24.11.8.25.01.8.25.0 rc11.8.25.0 rc21.8.26.01.8.26.0 rc11.8.26.11.8.27.01.8.27.0 rc11.8.27.0 rc21.8.28.01.8.28.0 rc11.8.31.8.3 rc11.8.3 rc21.8.3 rc31.8.3.11.8.3.21.8.3.31.8.41.8.4 rc11.8.4 rc21.8.4 rc31.8.4.11.8.4.21.8.4.31.8.4.41.8.51.8.5 rc11.8.5.01.8.6.01.8.6.0 rc11.8.6.0 rc21.8.6.0 rc31.8.7.01.8.7.0 rc11.8.7.0 rc21.8.7.11.8.8.01.8.8.0 patch1.8.8.0 rc11.8.8.0 rc21.8.8.0 rc31.8.8.0 rc41.8.8.0 rc51.8.8.11.8.8.21.8.9.01.8.9.0 rc11.8.9.0 rc21.8.9.0 rc31.8.9.11.8.9.21.8.9.311.0.011.0.0 beta111.0.0 beta211.0.0 rc111.0.0 rc211.0.111.0.211.1.011.1.0 rc111.1.0 rc311.1.111.1.211.10.011.10.0 rc111.2.0 rc111.2.0 rc211.3.0 rc111.3.0 rc211.4.011.4.0 rc111.4.0 rc211.4.0 rc311.5.011.5.0 rc111.5.0 rc211.5.111.8.011.8.0 rc111.8.0 rc211.8.0 rc311.8.111.9.011.9.0 rc111.9.0 rc212.0.012.1.012.1.0 rc112.1.0 rc212.1.0 rc312.1.112.2.012.2.0 rc112.2.0 rc212.2.0 rc312.3.012.3.0 rc112.3.0 rc2
Certified Asterisk· Digium
95%
1.8.151.8.15 cert11.8.15 cert1_rc11.8.15 cert1_rc21.8.15 cert1_rc31.8.15 cert21.8.15 cert31.8.15 cert41.8.15 cert511.6 cert111.6 cert1_rc111.6 cert1_rc211.6 cert211.6.011.6.0 rc111.6.0 rc2

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (3)

x_refsource_CONFIRMPatchVendor Advisory
Source: [email protected]
http://downloads.asterisk.org/pub/security/AST-2014-007.html
x_refsource_MISC
Source: [email protected]
http://packetstormsecurity.com/files/127089/Asterisk-Project-Security-Advisory-AST-2014-007.html
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/532415/100/0/threaded

CVSS

5MEDIUM[email protected]
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-noinfo

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card