VDB
GCVE-110-MAGEIA-2014-172
GCVE-110-MAGEIA-2014-172
Advisory Published
Updated asterisk packages fix security vulnerabilities:
In Asterisk before 11.8.1, sending a HTTP request that is handled by Asterisk
with a large number of Cookie headers could overflow the stack. You could
even exhaust memory if you sent an unlimited number of headers in the request
(CVE-2014-2286).
In Asterisk before 11.8.1, an attacker can use all available file descriptors
using SIP INVITE requests. Each INVITE meeting certain conditions will leak a
channel and several file descriptors. The file descriptors cannot be released
without restarting Asterisk which may allow intrusion detection systems to be
bypassed by sending the requests slowly (CVE-2014-2287).
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | java-1.7.0-openjdk | 0 (affected), 1.7.0.65-2.5.2.1.mga3 (unaffected) | — |
| Mageia | java-1.7.0-openjdk | 1.7.0.65-2.5.2.1.mga4 (unaffected), 0 (affected) | — |
| Mageia | asterisk | 0 (affected), 11.8.1-1.mga4 (unaffected), 0 (affected), 11.8.1-1.mga4 (unaffected) | — |
Aliases
References
Browse GCVE Records
73,443 records in the GCVE database · Updated July 18, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.