Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2014-8414 Details

Description

ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes, which allows remote attackers to cause a denial of service (channel hang and memory consumption) by causing transitions to be delayed, which triggers a state change from hung up to waiting for media.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://downloads.asterisk.org/pub/security/AST-2014-014.html CVE
http://seclists.org/fulldisclosure/2014/Nov/67 CVE
http://downloads.asterisk.org/pub/security/AST-2014-014.html [email protected]
http://seclists.org/fulldisclosure/2014/Nov/67 [email protected]

Weakness Enumeration

CWE-IDCWE NameSource
CWE-399Resource Management Errors[email protected]

Affected Products

ProductVersions
digium asterisk
<= 11.14.0

CPE

  • cpe:2.3:a:digium:asterisk:*:*:*:*:lts:*:*:*

Remediation

  • No remediation found in references.
digium certified asterisk
11.6 cert1
11.6 cert2
11.6 cert3
11.6 cert4
11.6 cert5

CPE

  • cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:lts:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:lts:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:lts:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:lts:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:lts:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:lts:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:lts:*:*:*
  • cpe:2.3:a:digium:certified_asterisk:11.6.0:*:*:*:lts:*:*:*

Remediation

  • No remediation found in references.

Change History

8 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2014-8414
NVD Published Date:
Nov 24, 2014
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2014-8414 Details - Not Deferred