CVE-2014-8412: Medium severity digium asterisk appliance developer kit vulnerability
The (1) VoIP channel drivers, (2) DUNDi, and (3) Asterisk Manager Interface (AMI) in Asterisk Open Source 1.8.x before 1.8.32.1, 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8.28 before 1.8.28-cert3 and 11.6 before 11.6-cert8 allows remote attackers to bypass the ACL restrictions via a packet with a source IP that does not share the address family as the first ACL entry.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8412?
CVE-2014-8412 has a severity rating that indicates a potential for remote attackers to bypass authentication and gain unauthorized access.
How do I fix CVE-2014-8412?
To fix CVE-2014-8412, update Asterisk to versions 1.8.32.1, 11.14.1, 12.7.1, or 13.0.1 or apply relevant patches.
Which versions of Asterisk are affected by CVE-2014-8412?
CVE-2014-8412 affects Asterisk Open Source versions prior to 1.8.32.1, 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1.
Can CVE-2014-8412 be exploited remotely?
Yes, CVE-2014-8412 can be exploited remotely by attackers to bypass authentication mechanisms.
What components of Asterisk are impacted by CVE-2014-8412?
CVE-2014-8412 impacts the VoIP channel drivers, DUNDi, and Asterisk Manager Interface (AMI) within Asterisk.