CVE-2014-2286

Published Apr 18, 2014 CVSS 2.0 · 7.5 High EPSS 16.3% KEV · Not listed
Description
main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before 11.6-cert2, allows remote attackers to cause a denial of service (stack consumption) and possibly execute arbitrary code via an HTTP request with a large number of Cookie headers.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DLA Debian DLA DLA-455-1 asterisk security update
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 6, 2024, 10:06 AM
Reserved
Mar 5, 2014, 12:00 AM
Status
Modified
Published
Apr 18, 2014, 10:14 PM
Modified
Jun 17, 2026, 12:06 AM