NVD

Id
36085  
Name
CVE-2014-9374  
Description
Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open Source 11.x before 11.14.2, 12.x before 12.7.2, and 13.x before 13.0.2 and Certified Asterisk 11.6 before 11.6-cert9 allows remote attackers to cause a denial of service (crash) by sending a zero length frame after a non-zero length frame.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-19  
Published
2014-12-12  
Modified Date
2015-03-25  
Seq
2014-9374  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
184464 36085 CVE-2014-9374 http://advisories.mageia.org/MGASA-2015-0010.html  View
184465 36085 CVE-2014-9374 http://downloads.asterisk.org/pub/security/AST-2014-019.html  View
184466 36085 CVE-2014-9374 http://packetstormsecurity.com/files/129473/Asterisk-Project-Security-Advisory-AST-2014-019.html  View
184467 36085 CVE-2014-9374 20141210 AST-2014-019: Remote Crash Vulnerability in WebSocket Server  View
184468 36085 CVE-2014-9374 MDVSA-2015:018  View
184469 36085 CVE-2014-9374 20141210 AST-2014-019: Remote Crash Vulnerability in WebSocket Server  View
184470 36085 CVE-2014-9374 71607  View
184471 36085 CVE-2014-9374 1031345  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
18342 JVNDB-2014-007217 Asterisk Open Source および Certified Asterisk の WebSocket Server におけるメモリ二重解放の脆弱性 Asterisk Open Source および Certified Asterisk の WebSocket Server (res_http_websocket モジュール) には、メモリ二重解放の脆弱性が存在します。 CVE-2014-9374 76667 CVE-2014-9374 36085 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007217.html 2014-12-10 2015-05-14 View