Lucene search

[email protected]NVD:CVE-2009-2346

HistorySep 08, 2009 - 6:30 p.m.

CVE-2009-2346

2009-09-0818:30:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.4

Confidence

Low

EPSS

0.966

Percentile

99.7%

JSON

The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263.

Affected configurations

Nvd

Node

asteriskasteriskMatchb.1.3.2business

asteriskasteriskMatchb.1.3.3business

asteriskasteriskMatchb.2.2.0business

asteriskasteriskMatchb.2.2.1business

asteriskasteriskMatchb.2.3.1business

asteriskasteriskMatchb.2.3.2business

asteriskasteriskMatchb.2.3.3business

asteriskasteriskMatchb.2.3.4business

asteriskasteriskMatchb.2.3.5business

asteriskasteriskMatchb.2.3.6business

asteriskasteriskMatchb.2.5.1business

asteriskasteriskMatchb.2.5.3business

asteriskasteriskMatchb.2.5.4business

asteriskasteriskMatchb.2.5.5business

asteriskasteriskMatchb.2.5.6business

asteriskasteriskMatchb.2.5.8business

asteriskasteriskMatchb.2.5.9business

asteriskasteriskMatchc.1.0_beta7business

asteriskasteriskMatchc.1.0_beta8business

asteriskasteriskMatchc.1.6business

asteriskasteriskMatchc.1.6.1business

asteriskasteriskMatchc.1.6.2business

asteriskasteriskMatchc.1.8.1business

asteriskasteriskMatchc.1.10.3business

asteriskasteriskMatchc.1.10.4business

asteriskasteriskMatchc.1.10.5business

asteriskasteriskMatchc.2.1.2.1business

asteriskasteriskMatchc.2.3business

asteriskasteriskMatchc.2.3.3business

asteriskasteriskMatchc.2.4.2business

asteriskasteriskMatchc.3.1.0business

asteriskopen_sourceMatch1.2.0

asteriskopen_sourceMatch1.2.0beta1

asteriskopen_sourceMatch1.2.0beta2

asteriskopen_sourceMatch1.2.0rc1

asteriskopen_sourceMatch1.2.0rc2

asteriskopen_sourceMatch1.2.1

asteriskopen_sourceMatch1.2.2

asteriskopen_sourceMatch1.2.2netsec

asteriskopen_sourceMatch1.2.3

asteriskopen_sourceMatch1.2.3netsec

asteriskopen_sourceMatch1.2.4

asteriskopen_sourceMatch1.2.4netsec

asteriskopen_sourceMatch1.2.5

asteriskopen_sourceMatch1.2.5netsec

asteriskopen_sourceMatch1.2.6

asteriskopen_sourceMatch1.2.6netsec

asteriskopen_sourceMatch1.2.7

asteriskopen_sourceMatch1.2.7netsec

asteriskopen_sourceMatch1.2.7.1

asteriskopen_sourceMatch1.2.7.1netsec

asteriskopen_sourceMatch1.2.8

asteriskopen_sourceMatch1.2.8netsec

asteriskopen_sourceMatch1.2.9

asteriskopen_sourceMatch1.2.9.1

asteriskopen_sourceMatch1.2.9.1netsec

asteriskopen_sourceMatch1.2.10

asteriskopen_sourceMatch1.2.10netsec

asteriskopen_sourceMatch1.2.11

asteriskopen_sourceMatch1.2.11netsec

asteriskopen_sourceMatch1.2.12

asteriskopen_sourceMatch1.2.12netsec

asteriskopen_sourceMatch1.2.12.1

asteriskopen_sourceMatch1.2.12.1netsec

asteriskopen_sourceMatch1.2.13

asteriskopen_sourceMatch1.2.13netsec

asteriskopen_sourceMatch1.2.14

asteriskopen_sourceMatch1.2.14netsec

asteriskopen_sourceMatch1.2.15

asteriskopen_sourceMatch1.2.15netsec

asteriskopen_sourceMatch1.2.16

asteriskopen_sourceMatch1.2.16netsec

asteriskopen_sourceMatch1.2.17

asteriskopen_sourceMatch1.2.17netsec

asteriskopen_sourceMatch1.2.18

asteriskopen_sourceMatch1.2.18netsec

asteriskopen_sourceMatch1.2.19

asteriskopen_sourceMatch1.2.19netsec

asteriskopen_sourceMatch1.2.20

asteriskopen_sourceMatch1.2.20netsec

asteriskopen_sourceMatch1.2.21

asteriskopen_sourceMatch1.2.21netsec

asteriskopen_sourceMatch1.2.21.1

asteriskopen_sourceMatch1.2.21.1netsec

asteriskopen_sourceMatch1.2.22

asteriskopen_sourceMatch1.2.22netsec

asteriskopen_sourceMatch1.2.23

asteriskopen_sourceMatch1.2.23netsec

asteriskopen_sourceMatch1.2.24

asteriskopen_sourceMatch1.2.24netsec

asteriskopen_sourceMatch1.2.25

asteriskopen_sourceMatch1.2.25netsec

asteriskopen_sourceMatch1.2.26

asteriskopen_sourceMatch1.2.26netsec

asteriskopen_sourceMatch1.2.26.1

asteriskopen_sourceMatch1.2.26.1netsec

asteriskopen_sourceMatch1.2.26.2

asteriskopen_sourceMatch1.2.26.2netsec

asteriskopen_sourceMatch1.2.27

asteriskopen_sourceMatch1.2.28

asteriskopen_sourceMatch1.2.29

asteriskopen_sourceMatch1.2.30

asteriskopen_sourceMatch1.2.30.2

asteriskopen_sourceMatch1.2.30.3

asteriskopen_sourceMatch1.2.30.4

asteriskopen_sourceMatch1.2.31

asteriskopen_sourceMatch1.2.32

asteriskopen_sourceMatch1.2.33

asteriskopen_sourceMatch1.2.34

asteriskopen_sourceMatch1.4.0

asteriskopen_sourceMatch1.4.0beta2

asteriskopen_sourceMatch1.4.0beta3

asteriskopen_sourceMatch1.4.0beta4

asteriskopen_sourceMatch1.4.1

asteriskopen_sourceMatch1.4.2

asteriskopen_sourceMatch1.4.3

asteriskopen_sourceMatch1.4.4

asteriskopen_sourceMatch1.4.5

asteriskopen_sourceMatch1.4.6

asteriskopen_sourceMatch1.4.7

asteriskopen_sourceMatch1.4.7.1

asteriskopen_sourceMatch1.4.8

asteriskopen_sourceMatch1.4.9

asteriskopen_sourceMatch1.4.10

asteriskopen_sourceMatch1.4.10.1

asteriskopen_sourceMatch1.4.11

asteriskopen_sourceMatch1.4.12

asteriskopen_sourceMatch1.4.12.1

asteriskopen_sourceMatch1.4.13

asteriskopen_sourceMatch1.4.14

asteriskopen_sourceMatch1.4.15

asteriskopen_sourceMatch1.4.16

asteriskopen_sourceMatch1.4.16.1

asteriskopen_sourceMatch1.4.16.2

asteriskopen_sourceMatch1.4.17

asteriskopen_sourceMatch1.4.18

asteriskopen_sourceMatch1.4.18.1

asteriskopen_sourceMatch1.4.19

asteriskopen_sourceMatch1.4.19rc-2

asteriskopen_sourceMatch1.4.19rc1

asteriskopen_sourceMatch1.4.19rc2

asteriskopen_sourceMatch1.4.19rc3

asteriskopen_sourceMatch1.4.19rc4

asteriskopen_sourceMatch1.4.19.1

asteriskopen_sourceMatch1.4.19.2

asteriskopen_sourceMatch1.4.20

asteriskopen_sourceMatch1.4.20rc1

asteriskopen_sourceMatch1.4.20rc2

asteriskopen_sourceMatch1.4.20rc3

asteriskopen_sourceMatch1.4.21

asteriskopen_sourceMatch1.4.21rc1

asteriskopen_sourceMatch1.4.21rc2

asteriskopen_sourceMatch1.4.21.1

asteriskopen_sourceMatch1.4.21.2

asteriskopen_sourceMatch1.4.22

asteriskopen_sourceMatch1.4.22rc3

asteriskopen_sourceMatch1.4.22rc4

asteriskopen_sourceMatch1.4.22.1

asteriskopen_sourceMatch1.4.22.2

asteriskopen_sourceMatch1.4.23

asteriskopen_sourceMatch1.4.23rc1

asteriskopen_sourceMatch1.4.23rc2

asteriskopen_sourceMatch1.4.23rc3

asteriskopen_sourceMatch1.4beta

asteriskopen_sourceMatch1.6.0beta1

asteriskopen_sourceMatch1.6.0beta2

asteriskopen_sourceMatch1.6.0beta3

asteriskopen_sourceMatch1.6.0beta4

asteriskopen_sourceMatch1.6.0beta5

asteriskopen_sourceMatch1.6.0beta7

asteriskopen_sourceMatch1.6.0beta7.1

asteriskopen_sourceMatch1.6.0beta8

asteriskopen_sourceMatch1.6.0beta9

asteriskopen_sourceMatch1.6.0rc4

asteriskopen_sourceMatch1.6.0rc5

asteriskopen_sourceMatch1.6.0rc6

asteriskopen_sourceMatch1.6.0.1

asteriskopen_sourceMatch1.6.0.2

asteriskopen_sourceMatch1.6.0.3

asteriskopen_sourceMatch1.6.0.3rc1

asteriskopen_sourceMatch1.6.1.0rc1

asteriskopen_sourceMatch1.6.1.0rc2

asteriskopen_sourceMatch1.6.1.5

asteriskopensourceMatch1.4.23.2

asteriskopensourceMatch1.4.24

asteriskopensourceMatch1.4.24.1

asteriskopensourceMatch1.4.26

asteriskopensourceMatch1.4.26.1

sangomaasteriskMatch1.6.1

sangomaasteriskMatch1.6.1.4

asteriskappliance_s800iMatch1.3

asteriskappliance_s800iMatch1.3.0.2

VendorProductVersionCPE
asteriskasteriskb.1.3.2cpe:2.3:a:asterisk:asterisk:b.1.3.2:*:business:*:*:*:*:*
asteriskasteriskb.1.3.3cpe:2.3:a:asterisk:asterisk:b.1.3.3:*:business:*:*:*:*:*
asteriskasteriskb.2.2.0cpe:2.3:a:asterisk:asterisk:b.2.2.0:*:business:*:*:*:*:*
asteriskasteriskb.2.2.1cpe:2.3:a:asterisk:asterisk:b.2.2.1:*:business:*:*:*:*:*
asteriskasteriskb.2.3.1cpe:2.3:a:asterisk:asterisk:b.2.3.1:*:business:*:*:*:*:*
asteriskasteriskb.2.3.2cpe:2.3:a:asterisk:asterisk:b.2.3.2:*:business:*:*:*:*:*
asteriskasteriskb.2.3.3cpe:2.3:a:asterisk:asterisk:b.2.3.3:*:business:*:*:*:*:*
asteriskasteriskb.2.3.4cpe:2.3:a:asterisk:asterisk:b.2.3.4:*:business:*:*:*:*:*
asteriskasteriskb.2.3.5cpe:2.3:a:asterisk:asterisk:b.2.3.5:*:business:*:*:*:*:*
asteriskasteriskb.2.3.6cpe:2.3:a:asterisk:asterisk:b.2.3.6:*:business:*:*:*:*:*

Vendor	Product	Version	CPE
asterisk	asterisk	b.1.3.2	cpe:2.3:a:asterisk:asterisk:b.1.3.2::business:::::
asterisk	asterisk	b.1.3.3	cpe:2.3:a:asterisk:asterisk:b.1.3.3::business:::::
asterisk	asterisk	b.2.2.0	cpe:2.3:a:asterisk:asterisk:b.2.2.0::business:::::
asterisk	asterisk	b.2.2.1	cpe:2.3:a:asterisk:asterisk:b.2.2.1::business:::::
asterisk	asterisk	b.2.3.1	cpe:2.3:a:asterisk:asterisk:b.2.3.1::business:::::
asterisk	asterisk	b.2.3.2	cpe:2.3:a:asterisk:asterisk:b.2.3.2::business:::::
asterisk	asterisk	b.2.3.3	cpe:2.3:a:asterisk:asterisk:b.2.3.3::business:::::
asterisk	asterisk	b.2.3.4	cpe:2.3:a:asterisk:asterisk:b.2.3.4::business:::::
asterisk	asterisk	b.2.3.5	cpe:2.3:a:asterisk:asterisk:b.2.3.5::business:::::
asterisk	asterisk	b.2.3.6	cpe:2.3:a:asterisk:asterisk:b.2.3.6::business:::::