Vulnerability Change Records for CVE-2014-8417

Change History

Modified CVE Analysis 11/25/2014 3:13:00 PM

Action Type Old Value New Value
Changed CPE Configuration
Configuration 1
     OR
          *cpe:2.3:a:asterisk:asterisk:11.14.0:*:*:*:lts:*:*:* (and previous)
          *cpe:2.3:a:asterisk:asterisk:12.7.0:*:*:*:standard:*:*:* (and previous)
          *cpe:2.3:a:asterisk:asterisk:13.0.0:*:*:*:lts:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert7:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert6:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert5:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert4:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert3:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert2:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert1:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6.0:*:*:*:lts:*:*:*
Configuration 1
     OR
          *cpe:2.3:a:digium:asterisk:11.14.0:*:*:*:lts:*:*:* (and previous)
          *cpe:2.3:a:digium:asterisk:12.7.0:*:*:*:standard:*:*:* (and previous)
          *cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:lts:*:*:*
          *cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:lts:*:*:*
          *cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:lts:*:*:*
          *cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:lts:*:*:*
          *cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:lts:*:*:*
          *cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:lts:*:*:*
          *cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:lts:*:*:*
          *cpe:2.3:a:digium:certified_asterisk:11.6.0:*:*:*:lts:*:*:*

Initial CVE Analysis 11/24/2014 2:28:03 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
Configuration 1
     OR
          *cpe:2.3:a:asterisk:asterisk:11.14.0:*:*:*:lts:*:*:* (and previous)
          *cpe:2.3:a:asterisk:asterisk:12.7.0:*:*:*:standard:*:*:* (and previous)
          *cpe:2.3:a:asterisk:asterisk:13.0.0:*:*:*:lts:*:*:* (and previous)
Configuration 2
     OR
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert7:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert6:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert5:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert4:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert3:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert2:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6:cert1:*:*:lts:*:*:*
          *cpe:2.3:a:asterisk:certified_asterisk:11.6.0:*:*:*:lts:*:*:*
Added CVSS V2

								
							
							
						
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Added CWE

								
							
							
						
CWE-264
Changed Reference Type
http://downloads.asterisk.org/pub/security/AST-2014-017.html No Types Assigned
http://downloads.asterisk.org/pub/security/AST-2014-017.html Advisory