Lucene search

[email protected]NVD:CVE-2009-2346

HistorySep 08, 2009 - 6:30 p.m.

CVE-2009-2346

2009-09-0818:30:00

CWE-119

[email protected]

web.nvd.nist.gov

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

Low

0.966 High

EPSS

Percentile

99.6%

JSON

The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263.

Affected configurations

NVD

Node

asteriskasteriskMatchb.1.3.2business

asteriskasteriskMatchb.1.3.3business

asteriskasteriskMatchb.2.2.0business

asteriskasteriskMatchb.2.2.1business

asteriskasteriskMatchb.2.3.1business

asteriskasteriskMatchb.2.3.2business

asteriskasteriskMatchb.2.3.3business

asteriskasteriskMatchb.2.3.4business

asteriskasteriskMatchb.2.3.5business

asteriskasteriskMatchb.2.3.6business

asteriskasteriskMatchb.2.5.1business

asteriskasteriskMatchb.2.5.3business

asteriskasteriskMatchb.2.5.4business

asteriskasteriskMatchb.2.5.5business

asteriskasteriskMatchb.2.5.6business

asteriskasteriskMatchb.2.5.8business

asteriskasteriskMatchb.2.5.9business

asteriskasteriskMatchc.1.0_beta7business

asteriskasteriskMatchc.1.0_beta8business

asteriskasteriskMatchc.1.6business

asteriskasteriskMatchc.1.6.1business

asteriskasteriskMatchc.1.6.2business

asteriskasteriskMatchc.1.8.1business

asteriskasteriskMatchc.1.10.3business

asteriskasteriskMatchc.1.10.4business

asteriskasteriskMatchc.1.10.5business

asteriskasteriskMatchc.2.1.2.1business

asteriskasteriskMatchc.2.3business

asteriskasteriskMatchc.2.3.3business

asteriskasteriskMatchc.2.4.2business

asteriskasteriskMatchc.3.1.0business

asteriskopen_sourceMatch1.2.0

asteriskopen_sourceMatch1.2.0beta1

asteriskopen_sourceMatch1.2.0beta2

asteriskopen_sourceMatch1.2.0rc1

asteriskopen_sourceMatch1.2.0rc2

asteriskopen_sourceMatch1.2.1

asteriskopen_sourceMatch1.2.2

asteriskopen_sourceMatch1.2.2netsec

asteriskopen_sourceMatch1.2.3

asteriskopen_sourceMatch1.2.3netsec

asteriskopen_sourceMatch1.2.4

asteriskopen_sourceMatch1.2.4netsec

asteriskopen_sourceMatch1.2.5

asteriskopen_sourceMatch1.2.5netsec

asteriskopen_sourceMatch1.2.6

asteriskopen_sourceMatch1.2.6netsec

asteriskopen_sourceMatch1.2.7

asteriskopen_sourceMatch1.2.7netsec

asteriskopen_sourceMatch1.2.7.1

asteriskopen_sourceMatch1.2.7.1netsec

asteriskopen_sourceMatch1.2.8

asteriskopen_sourceMatch1.2.8netsec

asteriskopen_sourceMatch1.2.9

asteriskopen_sourceMatch1.2.9.1

asteriskopen_sourceMatch1.2.9.1netsec

asteriskopen_sourceMatch1.2.10

asteriskopen_sourceMatch1.2.10netsec

asteriskopen_sourceMatch1.2.11

asteriskopen_sourceMatch1.2.11netsec

asteriskopen_sourceMatch1.2.12

asteriskopen_sourceMatch1.2.12netsec

asteriskopen_sourceMatch1.2.12.1

asteriskopen_sourceMatch1.2.12.1netsec

asteriskopen_sourceMatch1.2.13

asteriskopen_sourceMatch1.2.13netsec

asteriskopen_sourceMatch1.2.14

asteriskopen_sourceMatch1.2.14netsec

asteriskopen_sourceMatch1.2.15

asteriskopen_sourceMatch1.2.15netsec

asteriskopen_sourceMatch1.2.16

asteriskopen_sourceMatch1.2.16netsec

asteriskopen_sourceMatch1.2.17

asteriskopen_sourceMatch1.2.17netsec

asteriskopen_sourceMatch1.2.18

asteriskopen_sourceMatch1.2.18netsec

asteriskopen_sourceMatch1.2.19

asteriskopen_sourceMatch1.2.19netsec

asteriskopen_sourceMatch1.2.20

asteriskopen_sourceMatch1.2.20netsec

asteriskopen_sourceMatch1.2.21

asteriskopen_sourceMatch1.2.21netsec

asteriskopen_sourceMatch1.2.21.1

asteriskopen_sourceMatch1.2.21.1netsec

asteriskopen_sourceMatch1.2.22

asteriskopen_sourceMatch1.2.22netsec

asteriskopen_sourceMatch1.2.23

asteriskopen_sourceMatch1.2.23netsec

asteriskopen_sourceMatch1.2.24

asteriskopen_sourceMatch1.2.24netsec

asteriskopen_sourceMatch1.2.25

asteriskopen_sourceMatch1.2.25netsec

asteriskopen_sourceMatch1.2.26

asteriskopen_sourceMatch1.2.26netsec

asteriskopen_sourceMatch1.2.26.1

asteriskopen_sourceMatch1.2.26.1netsec

asteriskopen_sourceMatch1.2.26.2

asteriskopen_sourceMatch1.2.26.2netsec

asteriskopen_sourceMatch1.2.27

asteriskopen_sourceMatch1.2.28

asteriskopen_sourceMatch1.2.29

asteriskopen_sourceMatch1.2.30

asteriskopen_sourceMatch1.2.30.2

asteriskopen_sourceMatch1.2.30.3

asteriskopen_sourceMatch1.2.30.4

asteriskopen_sourceMatch1.2.31

asteriskopen_sourceMatch1.2.32

asteriskopen_sourceMatch1.2.33

asteriskopen_sourceMatch1.2.34

asteriskopen_sourceMatch1.4.0

asteriskopen_sourceMatch1.4.0beta2

asteriskopen_sourceMatch1.4.0beta3

asteriskopen_sourceMatch1.4.0beta4

asteriskopen_sourceMatch1.4.1

asteriskopen_sourceMatch1.4.2

asteriskopen_sourceMatch1.4.3

asteriskopen_sourceMatch1.4.4

asteriskopen_sourceMatch1.4.5

asteriskopen_sourceMatch1.4.6

asteriskopen_sourceMatch1.4.7

asteriskopen_sourceMatch1.4.7.1

asteriskopen_sourceMatch1.4.8

asteriskopen_sourceMatch1.4.9

asteriskopen_sourceMatch1.4.10

asteriskopen_sourceMatch1.4.10.1

asteriskopen_sourceMatch1.4.11

asteriskopen_sourceMatch1.4.12

asteriskopen_sourceMatch1.4.12.1

asteriskopen_sourceMatch1.4.13

asteriskopen_sourceMatch1.4.14

asteriskopen_sourceMatch1.4.15

asteriskopen_sourceMatch1.4.16

asteriskopen_sourceMatch1.4.16.1

asteriskopen_sourceMatch1.4.16.2

asteriskopen_sourceMatch1.4.17

asteriskopen_sourceMatch1.4.18

asteriskopen_sourceMatch1.4.18.1

asteriskopen_sourceMatch1.4.19

asteriskopen_sourceMatch1.4.19rc-2

asteriskopen_sourceMatch1.4.19rc1

asteriskopen_sourceMatch1.4.19rc2

asteriskopen_sourceMatch1.4.19rc3

asteriskopen_sourceMatch1.4.19rc4

asteriskopen_sourceMatch1.4.19.1

asteriskopen_sourceMatch1.4.19.2

asteriskopen_sourceMatch1.4.20

asteriskopen_sourceMatch1.4.20rc1

asteriskopen_sourceMatch1.4.20rc2

asteriskopen_sourceMatch1.4.20rc3

asteriskopen_sourceMatch1.4.21

asteriskopen_sourceMatch1.4.21rc1

asteriskopen_sourceMatch1.4.21rc2

asteriskopen_sourceMatch1.4.21.1

asteriskopen_sourceMatch1.4.21.2

asteriskopen_sourceMatch1.4.22

asteriskopen_sourceMatch1.4.22rc3

asteriskopen_sourceMatch1.4.22rc4

asteriskopen_sourceMatch1.4.22.1

asteriskopen_sourceMatch1.4.22.2

asteriskopen_sourceMatch1.4.23

asteriskopen_sourceMatch1.4.23rc1

asteriskopen_sourceMatch1.4.23rc2

asteriskopen_sourceMatch1.4.23rc3

asteriskopen_sourceMatch1.4beta

asteriskopen_sourceMatch1.6.0beta1

asteriskopen_sourceMatch1.6.0beta2

asteriskopen_sourceMatch1.6.0beta3

asteriskopen_sourceMatch1.6.0beta4

asteriskopen_sourceMatch1.6.0beta5

asteriskopen_sourceMatch1.6.0beta7

asteriskopen_sourceMatch1.6.0beta7.1

asteriskopen_sourceMatch1.6.0beta8

asteriskopen_sourceMatch1.6.0beta9

asteriskopen_sourceMatch1.6.0rc4

asteriskopen_sourceMatch1.6.0rc5

asteriskopen_sourceMatch1.6.0rc6

asteriskopen_sourceMatch1.6.0.1

asteriskopen_sourceMatch1.6.0.2

asteriskopen_sourceMatch1.6.0.3

asteriskopen_sourceMatch1.6.0.3rc1

asteriskopen_sourceMatch1.6.1

asteriskopen_sourceMatch1.6.1.0rc1

asteriskopen_sourceMatch1.6.1.0rc2

asteriskopen_sourceMatch1.6.1.4

asteriskopen_sourceMatch1.6.1.5

asteriskopensourceMatch1.4.23.2

asteriskopensourceMatch1.4.24

asteriskopensourceMatch1.4.24.1

asteriskopensourceMatch1.4.26

asteriskopensourceMatch1.4.26.1

asteriskappliance_s800iMatch1.3

asteriskappliance_s800iMatch1.3.0.2

References

downloads.asterisk.org/pub/security/AST-2009-006.html

secunia.com/advisories/36593

securitytracker.com/id?1022819

www.securityfocus.com/archive/1/506257/100/0/threaded

www.securityfocus.com/bid/36275

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

Low

0.966 High

EPSS

Percentile

99.6%

JSON

Related for NVD:CVE-2009-2346

cve2 cvelist2 ubuntucve2 debiancve2 prion2 openvas13 nessus9 securityvulns4 checkpoint_advisories2 nvd1 fedora4 gentoo2