Multiple Asterisk Products WebSocket Server Denial of Service Vulnerability
BID:71607
Info
Multiple Asterisk Products WebSocket Server Denial of Service Vulnerability
| Bugtraq ID: | 71607 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2014-9374 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 10 2014 12:00AM |
| Updated: | Jan 12 2015 12:03AM |
| Credit: | Badalian Vyacheslav |
| Vulnerable: |
Gentoo Linux |
| Not Vulnerable: | |
Discussion
Multiple Asterisk Products WebSocket Server Denial of Service Vulnerability
Multiple Asterisk products are prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to crash the application, resulting in a denial-of-service conditions.
Multiple Asterisk products are prone to a remote denial-of-service vulnerability.
Attackers can exploit this issue to crash the application, resulting in a denial-of-service conditions.
Exploit / POC
Multiple Asterisk Products WebSocket Server Denial of Service Vulnerability
Attackers can exploit this issue through readily available tools.
Attackers can exploit this issue through readily available tools.
Solution / Fix
Multiple Asterisk Products WebSocket Server Denial of Service Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple Asterisk Products WebSocket Server Denial of Service Vulnerability
References:
References:
- Asterisk Homepage (Asterisk)