Search for vulnerabilities
Vulnerability details: VCID-amqm-tmtt-aaae
Vulnerability ID VCID-amqm-tmtt-aaae
Aliases CVE-2014-8414
Summary ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes, which allows remote attackers to cause a denial of service (channel hang and memory consumption) by causing transitions to be delayed, which triggers a state change from hung up to waiting for media.
Status Published
Exploitability 0.5
Weighted Severity 4.5
Risk 2.2
Affected and Fixed Packages Package Details
Weaknesses (1)
CWE-399 Resource Management Errors
System Score Found at
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00526 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00746 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00746 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00746 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.00746 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01474 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
epss 0.01882 https://api.first.org/data/v1/epss?cve=CVE-2014-8414
cvssv2 5.0 https://nvd.nist.gov/vuln/detail/CVE-2014-8414
Reference id Reference type URL
http://downloads.asterisk.org/pub/security/AST-2014-014.html
https://api.first.org/data/v1/epss?cve=CVE-2014-8414
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8414
http://seclists.org/fulldisclosure/2014/Nov/67
771463 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=771463
cpe:2.3:a:digium:asterisk:*:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:digium:asterisk:*:*:*:*:lts:*:*:*
cpe:2.3:a:digium:certified_asterisk:11.6.0:*:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:digium:certified_asterisk:11.6.0:*:*:*:lts:*:*:*
cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:lts:*:*:*
cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:lts:*:*:*
cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:lts:*:*:*
cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:lts:*:*:*
cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:lts:*:*:*
cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:lts:*:*:*
cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:lts:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:lts:*:*:*
CVE-2014-8414 https://nvd.nist.gov/vuln/detail/CVE-2014-8414
GLSA-201412-51 https://security.gentoo.org/glsa/201412-51
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2014-8414
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.77642
EPSS Score 0.00526
Published At Nov. 23, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.