CVE-2014-2286

CVE-2014-2286 describes a denial-of-service vulnerability in Asterisk Open Source and Certified Asterisk versions, where a remote attacker can cause stack consumption and potentially execute arbitrary code by sending an HTTP request with an excessive number of Cookie headers. This vulnerability has a CVSS score of 7.5, indicating high severity due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impact. While the FAUCET Risk Score is 83/100, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.