Unrated severityNVD Advisory· Published Apr 18, 2014· Updated Jun 17, 2026
CVE-2014-2288
CVE-2014-2288
Description
The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualify_frequency "is enabled on an AOR and the remote SIP server challenges for authentication of the resulting OPTIONS request," allows remote attackers to cause a denial of service (crash) via a PJSIP endpoint that does not have an associated outgoing request.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:digium:asterisk:12.0.0:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:digium:asterisk:12.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:12.1.0:-:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:12.1.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:12.1.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:digium:asterisk:12.1.0:rc3:*:*:*:*:*:*
- Range: <12.1.1
Patches
Vulnerability mechanics
References
5- downloads.asterisk.org/pub/security/AST-2014-003-12.diffnvdPatch
- downloads.asterisk.org/pub/security/AST-2014-003.htmlnvdVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2014-March/130400.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2014-March/130426.htmlnvd
- issues.asterisk.org/jira/browse/ASTERISK-23210nvd
News mentions
0No linked articles in our index yet.