Lucene search

[email protected]CVE-2008-1923

HistoryApr 23, 2008 - 4:05 p.m.

CVE-2008-1923

2008-04-2316:05:00

CWE-16

[email protected]

web.nvd.nist.gov

iax2

asterisk

dos

cve-2008-1923

nvd

6.8 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.019 Low

EPSS

Percentile

88.4%

JSON

The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends “early audio” to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message.

CPENameOperatorVersion
asterisk:asterisk_business_editionasterisk asterisk business editioneqb.2.2.0
asterisk:open_sourceasterisk open sourceeq1.2.4
asterisk:open_sourceasterisk open sourceeq1.2.8
asterisk:open_sourceasterisk open sourceeq1.2.16
asterisk:asterisk_business_editionasterisk asterisk business editioneqc.1.6.1
asterisk:open_sourceasterisk open sourceeq1.0.1
asterisk:s800iasterisk s800ieq1.0.3.3
asterisk:open_sourceasterisk open sourceeq1.2.14
asterisk:s800iasterisk s800ieq1.0
asterisk:s800iasterisk s800ieq1.0.2

CPE	Name	Operator	Version
asterisk:asterisk_business_edition	asterisk asterisk business edition	eq	b.2.2.0
asterisk:open_source	asterisk open source	eq	1.2.4
asterisk:open_source	asterisk open source	eq	1.2.8
asterisk:open_source	asterisk open source	eq	1.2.16
asterisk:asterisk_business_edition	asterisk asterisk business edition	eq	c.1.6.1
asterisk:open_source	asterisk open source	eq	1.0.1
asterisk:s800i	asterisk s800i	eq	1.0.3.3
asterisk:open_source	asterisk open source	eq	1.2.14
asterisk:s800i	asterisk s800i	eq	1.0
asterisk:s800i	asterisk s800i	eq	1.0.2

Rows per page:

1-10 of 1031

References

bugs.digium.com/view.php?id=10078

downloads.digium.com/pub/security/AST-2008-006.html

www.altsci.com/concepts/page.php?s=asteri&p=1

exchange.xforce.ibmcloud.com/vulnerabilities/42049

6.8 Medium

AI Score

Confidence

Low

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.019 Low

EPSS

Percentile

88.4%

JSON

Related for CVE-2008-1923

debiancve2 prion2 ubuntucve2 nessus1 cve1