Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the res_fax_spandsp module, allows remote authenticated users to cause a denial of service (crash) via an out of call message, which is not properly handled in the ReceiveFax dialplan application.
References
Link | Resource |
---|---|
http://downloads.asterisk.org/pub/security/AST-2014-010.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2014-11-26 07:59
Updated : 2014-11-26 13:33
NVD link : CVE-2014-6610
Mitre link : CVE-2014-6610
JSON object : View
CWE
CWE-19
Data Processing Errors
Products Affected
digium
- certified_asterisk
- asterisk