Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2014-4047

EPSS 3.04% · P87
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2014-4047

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 before 1.8.15-cert6 and 11.6 before 11.6-cert3 allows remote attackers to cause a denial of service (connection consumption) via a large number of (1) inactive or (2) incomplete HTTP connections.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Digium Asterisk Open Source和Certified Asterisk 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Digium Asterisk Open Source和Certified Asterisk都是美国Digium公司的开源电话交换机(PBX)系统软件。该软件支持语音信箱、多方语音会议、交互式语音应答(IVR)等。PJSIP是其中的一个多媒体通信库。multi-part body parser是其中的一个解析器。 Digium Asterisk Open Source和Certified Asterisk中存在安全漏洞。远程攻击者可通过发送大量不完整的HTTP连接利用该漏洞造成拒绝服务。以下版本受到影响:
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2014-4047

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2014-4047

登录查看更多情报信息。

Same Patch Batch · n/a · 2014-06-17 · 19 CVEs total

CVE-2014-3476OpenStack Identity 安全漏洞
CVE-2014-4190Huawei Campus Series Switches 基于堆的缓冲区溢出漏洞
CVE-2014-4189Hitachi Tuning Manager和JP1/Performance Management - Manager Web Option 跨站脚本漏洞
CVE-2014-4188Hitachi Tuning Manager和JP1/Performance Management - Manager Web Option 跨站请求伪造漏洞
CVE-2014-4187ClipBucket 跨站脚本漏洞
CVE-2014-4048Digium Asterisk Open Source 安全漏洞
CVE-2014-4046Digium Asterisk Open Source和Certified Asterisk 安全漏洞
CVE-2014-4045Digium Asterisk Open Source 安全漏洞
CVE-2014-4044IBM OpenAFS 安全漏洞
CVE-2013-6078EMC RSA BSAFE Toolkits和RSA Data Protection Manager 安全漏洞
CVE-2014-3249Puppet Enterprise 安全漏洞
CVE-2014-0478APT 输入验证错误漏洞
CVE-2014-4193EMC RSA BSAFE-Java Toolkits 安全漏洞
CVE-2014-4192EMC RSA BSAFE-C Toolkits 安全漏洞
CVE-2014-4191EMC RSA BSAFE-C Toolkits 安全漏洞
CVE-2014-4040powerpc-utils 加密问题漏洞
CVE-2014-4039ppc64-diag‘/tmp’文件本地竞争条件漏洞
CVE-2014-4038ppc64-diag 安全漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2014-4047

No comments yet


Leave a comment