CVE-2014-8415

Asterisk 12.x < 12.7.1 and 13.x < 13.0.1 - Denial of Service via SIP Session Cancel Request

Title source: llm
STIX 2.1

Description

Race condition in the chan_pjsip channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a cancel request for a SIP session with a queued action to (1) answer a session or (2) send ringing.

References (1)

Core 1
Core References

Scores

EPSS 0.0304
EPSS Percentile 86.0%

Details

CWE
CWE-20
Status published
Products (1)
digium/asterisk 12.0.0 - 12.7.1
Published Nov 24, 2014
Tracked Since Feb 18, 2026