Lucene search

[email protected]NVD:CVE-2015-3008

HistoryApr 10, 2015 - 3:00 p.m.

CVE-2015-3008

2015-04-1015:00:10

CWE-310

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.2

Confidence

High

EPSS

0.805

Percentile

98.4%

JSON

Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified Asterisk 1.8.28 before 1.8.28-cert5, 11.6 before 11.6-cert11, and 13.1 before 13.1-cert2, when registering a SIP TLS device, does not properly handle a null byte in a domain name in the subject’s Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority.

Affected configurations

Nvd

Node

digiumasteriskMatch1.8.0

digiumasteriskMatch1.8.0beta1

digiumasteriskMatch1.8.0beta2

digiumasteriskMatch1.8.0beta3

digiumasteriskMatch1.8.0beta4

digiumasteriskMatch1.8.0beta5

digiumasteriskMatch1.8.0rc2

digiumasteriskMatch1.8.0rc3

digiumasteriskMatch1.8.0rc4

digiumasteriskMatch1.8.0rc5

digiumasteriskMatch1.8.1

digiumasteriskMatch1.8.1rc1

digiumasteriskMatch1.8.1.1

digiumasteriskMatch1.8.1.2

digiumasteriskMatch1.8.2

digiumasteriskMatch1.8.2.1

digiumasteriskMatch1.8.2.2

digiumasteriskMatch1.8.2.3

digiumasteriskMatch1.8.2.4

digiumasteriskMatch1.8.3

digiumasteriskMatch1.8.3rc1

digiumasteriskMatch1.8.3rc2

digiumasteriskMatch1.8.3rc3

digiumasteriskMatch1.8.3.1

digiumasteriskMatch1.8.3.2

digiumasteriskMatch1.8.3.3

digiumasteriskMatch1.8.10.0

digiumasteriskMatch1.8.10.0-

digiumasteriskMatch1.8.10.0rc1

digiumasteriskMatch1.8.10.0rc2

digiumasteriskMatch1.8.10.0rc3

digiumasteriskMatch1.8.10.0rc4

digiumasteriskMatch1.8.10.1

digiumasteriskMatch1.8.11.0

digiumasteriskMatch1.8.11.0-

digiumasteriskMatch1.8.11.0patch

digiumasteriskMatch1.8.11.0rc2

digiumasteriskMatch1.8.11.0rc3

digiumasteriskMatch1.8.11.1

digiumasteriskMatch1.8.11.1-

digiumasteriskMatch1.8.11.1patch

digiumasteriskMatch1.8.12

digiumasteriskMatch1.8.12.0

digiumasteriskMatch1.8.12.0-

digiumasteriskMatch1.8.12.0rc1

digiumasteriskMatch1.8.12.0rc2

digiumasteriskMatch1.8.12.0rc3

digiumasteriskMatch1.8.12.1

digiumasteriskMatch1.8.12.2

digiumasteriskMatch1.8.13.0

digiumasteriskMatch1.8.13.0rc1

digiumasteriskMatch1.8.13.0rc2

digiumasteriskMatch1.8.13.1

digiumasteriskMatch1.8.14.0-

digiumasteriskMatch1.8.14.0patch

digiumasteriskMatch1.8.14.0rc1

digiumasteriskMatch1.8.14.0rc2

digiumasteriskMatch1.8.14.1

digiumasteriskMatch1.8.14.1-

digiumasteriskMatch1.8.14.1patch

digiumasteriskMatch1.8.15.0

digiumasteriskMatch1.8.15.0-

digiumasteriskMatch1.8.15.0rc1

digiumasteriskMatch1.8.15.1

digiumasteriskMatch1.8.16.0

digiumasteriskMatch1.8.16.0-

digiumasteriskMatch1.8.16.0rc1

digiumasteriskMatch1.8.16.0rc2

digiumasteriskMatch1.8.17.0

digiumasteriskMatch1.8.17.0-

digiumasteriskMatch1.8.17.0patch

digiumasteriskMatch1.8.17.0rc1

digiumasteriskMatch1.8.17.0rc2

digiumasteriskMatch1.8.17.0rc3

digiumasteriskMatch1.8.18.0

digiumasteriskMatch1.8.18.0-

digiumasteriskMatch1.8.18.0rc1

digiumasteriskMatch1.8.18.1

digiumasteriskMatch1.8.19.0

digiumasteriskMatch1.8.19.0-

digiumasteriskMatch1.8.19.0rc1

digiumasteriskMatch1.8.19.0rc3

digiumasteriskMatch1.8.19.1

digiumasteriskMatch1.8.20.0-

digiumasteriskMatch1.8.20.0patch

digiumasteriskMatch1.8.20.0rc1

digiumasteriskMatch1.8.20.0rc2

digiumasteriskMatch1.8.20.1-

digiumasteriskMatch1.8.20.1patch

digiumasteriskMatch1.8.20.2-

digiumasteriskMatch1.8.20.2patch

digiumasteriskMatch1.8.21.0-

digiumasteriskMatch1.8.21.0rc1

digiumasteriskMatch1.8.21.0rc2

digiumasteriskMatch1.8.22.0-

digiumasteriskMatch1.8.22.0rc1

digiumasteriskMatch1.8.22.0rc2

digiumasteriskMatch1.8.23.0-

digiumasteriskMatch1.8.23.0patch

digiumasteriskMatch1.8.23.0rc1

digiumasteriskMatch1.8.23.0rc2

digiumasteriskMatch1.8.23.1

digiumasteriskMatch1.8.24.0-

digiumasteriskMatch1.8.24.0rc1

digiumasteriskMatch1.8.24.0rc2

digiumasteriskMatch1.8.24.1

digiumasteriskMatch1.8.25.0-

digiumasteriskMatch1.8.25.0rc1

digiumasteriskMatch1.8.25.0rc2

digiumasteriskMatch1.8.26.0-

digiumasteriskMatch1.8.26.0rc1

digiumasteriskMatch1.8.26.1

digiumasteriskMatch1.8.27.0

digiumasteriskMatch1.8.27.0rc1

digiumasteriskMatch1.8.27.0rc2

digiumasteriskMatch1.8.28.0

digiumasteriskMatch1.8.28.0rc1

digiumasteriskMatch1.8.28.1

digiumasteriskMatch1.8.28.2

digiumasteriskMatch1.8.32.0lts

digiumasteriskMatch11.0.0

digiumasteriskMatch11.0.0beta1

digiumasteriskMatch11.0.0beta2

digiumasteriskMatch11.0.0rc1

digiumasteriskMatch11.0.0rc2

digiumasteriskMatch11.0.1

digiumasteriskMatch11.0.2

digiumasteriskMatch11.1.0

digiumasteriskMatch11.1.0rc1

digiumasteriskMatch11.1.0rc2

digiumasteriskMatch11.1.0rc3

digiumasteriskMatch11.1.1

digiumasteriskMatch11.1.2

digiumasteriskMatch11.2.0rc1

digiumasteriskMatch11.2.0rc2

digiumasteriskMatch11.3.0rc1

digiumasteriskMatch11.3.0rc2

digiumasteriskMatch11.4.0

digiumasteriskMatch11.4.0rc1

digiumasteriskMatch11.4.0rc2

digiumasteriskMatch11.4.0rc3

digiumasteriskMatch11.4.0rc4

digiumasteriskMatch11.5.0

digiumasteriskMatch11.5.0rc1

digiumasteriskMatch11.5.0rc2

digiumasteriskMatch11.5.1

digiumasteriskMatch11.6.0

digiumasteriskMatch11.6.0rc1

digiumasteriskMatch11.6.0rc2

digiumasteriskMatch11.7.0

digiumasteriskMatch11.7.0rc1

digiumasteriskMatch11.7.0rc2

digiumasteriskMatch11.8.0-

digiumasteriskMatch11.8.0rc1

digiumasteriskMatch11.8.0rc2

digiumasteriskMatch11.8.0rc3

digiumasteriskMatch11.8.1

digiumasteriskMatch11.9.0

digiumasteriskMatch11.9.0rc1

digiumasteriskMatch11.9.0rc2

digiumasteriskMatch11.9.0rc3

digiumasteriskMatch11.10.0

digiumasteriskMatch11.10.0rc1

digiumasteriskMatch11.10.1

digiumasteriskMatch11.10.1rc1

digiumasteriskMatch11.11.0

digiumasteriskMatch11.11.0rc1

digiumasteriskMatch11.12.0

digiumasteriskMatch11.12.0rc1

digiumasteriskMatch11.13.0

digiumasteriskMatch11.13.0rc1

digiumasteriskMatch11.14.0lts

digiumasteriskMatch11.14.0rc1

digiumasteriskMatch11.14.0rc2

digiumasteriskMatch11.15.0

digiumasteriskMatch11.16.0

digiumasteriskMatch11.17.0

digiumasteriskMatch12.0.0

digiumasteriskMatch12.1.0-

digiumasteriskMatch12.1.0rc1

digiumasteriskMatch12.1.0rc2

digiumasteriskMatch12.1.0rc3

digiumasteriskMatch12.1.1

digiumasteriskMatch12.2.0

digiumasteriskMatch12.2.0rc1

digiumasteriskMatch12.2.0rc2

digiumasteriskMatch12.2.0rc3

digiumasteriskMatch12.3.0

digiumasteriskMatch12.3.0rc1

digiumasteriskMatch12.3.0rc2

digiumasteriskMatch12.3.1

digiumasteriskMatch12.3.2

digiumasteriskMatch12.4.0

digiumasteriskMatch12.4.0rc1

digiumasteriskMatch12.5.0

digiumasteriskMatch12.5.0rc1

digiumasteriskMatch12.6.0

digiumasteriskMatch12.6.0rc1

digiumasteriskMatch12.7.0lts

digiumasteriskMatch12.7.0standard

digiumasteriskMatch12.7.0rc1

digiumasteriskMatch12.7.0rc2

digiumasteriskMatch12.7.1

digiumasteriskMatch12.8.0

digiumasteriskMatch12.8.0rc1

digiumasteriskMatch12.8.0rc2

digiumasteriskMatch12.8.1

digiumasteriskMatch13.0.0lts

digiumasteriskMatch13.0.1

digiumasteriskMatch13.1.0

digiumasteriskMatch13.1.0rc1

digiumasteriskMatch13.1.0rc2

digiumasteriskMatch13.2.0

digiumasteriskMatch13.2.0rc1

digiumasteriskMatch13.3.0

digiumasteriskMatch13.3.1

digiumcertified_asteriskMatch1.8.0.0-

digiumcertified_asteriskMatch1.8.0.0beta1

digiumcertified_asteriskMatch1.8.0.0beta2

digiumcertified_asteriskMatch1.8.0.0beta3

digiumcertified_asteriskMatch1.8.0.0beta4

digiumcertified_asteriskMatch1.8.0.0beta5

digiumcertified_asteriskMatch1.8.0.0rc1

digiumcertified_asteriskMatch1.8.0.0rc2

digiumcertified_asteriskMatch1.8.0.0rc3

digiumcertified_asteriskMatch1.8.0.0rc4

digiumcertified_asteriskMatch1.8.0.0rc5

digiumcertified_asteriskMatch1.8.1.0-

digiumcertified_asteriskMatch1.8.1.0rc1

digiumcertified_asteriskMatch1.8.2.0-

digiumcertified_asteriskMatch1.8.2.0rc1

digiumcertified_asteriskMatch1.8.3.0-

digiumcertified_asteriskMatch1.8.3.0rc1

digiumcertified_asteriskMatch1.8.3.0rc2

digiumcertified_asteriskMatch1.8.3.0rc3

digiumcertified_asteriskMatch1.8.4.0-

digiumcertified_asteriskMatch1.8.4.0rc1

digiumcertified_asteriskMatch1.8.4.0rc2

digiumcertified_asteriskMatch1.8.4.0rc3

digiumcertified_asteriskMatch1.8.5.0-

digiumcertified_asteriskMatch1.8.5.0rc1

digiumcertified_asteriskMatch1.8.6.0-

digiumcertified_asteriskMatch1.8.6.0rc1

digiumcertified_asteriskMatch1.8.6.0rc2

digiumcertified_asteriskMatch1.8.6.0rc3

digiumcertified_asteriskMatch1.8.7.0-

digiumcertified_asteriskMatch1.8.7.0rc1

digiumcertified_asteriskMatch1.8.7.0rc2

digiumcertified_asteriskMatch1.8.8.0-

digiumcertified_asteriskMatch1.8.8.0rc1

digiumcertified_asteriskMatch1.8.8.0rc2

digiumcertified_asteriskMatch1.8.8.0rc3

digiumcertified_asteriskMatch1.8.8.0rc4

digiumcertified_asteriskMatch1.8.8.0rc5

digiumcertified_asteriskMatch1.8.9.0-

digiumcertified_asteriskMatch1.8.9.0rc1

digiumcertified_asteriskMatch1.8.9.0rc2

digiumcertified_asteriskMatch1.8.9.0rc3

digiumcertified_asteriskMatch1.8.10.0-

digiumcertified_asteriskMatch1.8.10.0rc1

digiumcertified_asteriskMatch1.8.10.0rc2

digiumcertified_asteriskMatch1.8.10.0rc3

digiumcertified_asteriskMatch1.8.10.0rc4

digiumcertified_asteriskMatch1.8.11cert

digiumcertified_asteriskMatch1.8.11cert1

digiumcertified_asteriskMatch1.8.11cert10

digiumcertified_asteriskMatch1.8.11cert2

digiumcertified_asteriskMatch1.8.11cert3

digiumcertified_asteriskMatch1.8.11cert4

digiumcertified_asteriskMatch1.8.11cert5

digiumcertified_asteriskMatch1.8.11cert6

digiumcertified_asteriskMatch1.8.11cert7

digiumcertified_asteriskMatch1.8.11cert8

digiumcertified_asteriskMatch1.8.11cert9

digiumcertified_asteriskMatch1.8.11.0-

digiumcertified_asteriskMatch1.8.11.0rc1

digiumcertified_asteriskMatch1.8.11.0rc2

digiumcertified_asteriskMatch1.8.11.0rc3

digiumcertified_asteriskMatch1.8.12.0-

digiumcertified_asteriskMatch1.8.12.0rc1

digiumcertified_asteriskMatch1.8.12.0rc2

digiumcertified_asteriskMatch1.8.12.0rc3

digiumcertified_asteriskMatch1.8.13.0-

digiumcertified_asteriskMatch1.8.13.0rc1

digiumcertified_asteriskMatch1.8.13.0rc2

digiumcertified_asteriskMatch1.8.14.0rc1

digiumcertified_asteriskMatch1.8.14.0rc2

digiumcertified_asteriskMatch1.8.15-

digiumcertified_asteriskMatch1.8.15cert1

digiumcertified_asteriskMatch1.8.15cert1_rc1

digiumcertified_asteriskMatch1.8.15cert1_rc2

digiumcertified_asteriskMatch1.8.15cert1_rc3

digiumcertified_asteriskMatch1.8.15cert2

digiumcertified_asteriskMatch1.8.15cert3

digiumcertified_asteriskMatch1.8.15cert4

digiumcertified_asteriskMatch1.8.15cert5

digiumcertified_asteriskMatch1.8.15cert6

digiumcertified_asteriskMatch1.8.28cert1lts

digiumcertified_asteriskMatch1.8.28cert2lts

digiumcertified_asteriskMatch1.8.28cert3lts

digiumcertified_asteriskMatch1.8.28cert4lts

digiumcertified_asteriskMatch1.8.28.0lts

digiumcertified_asteriskMatch11.6cert1

digiumcertified_asteriskMatch11.6cert1lts

digiumcertified_asteriskMatch11.6cert1_rc1

digiumcertified_asteriskMatch11.6cert1_rc2

digiumcertified_asteriskMatch11.6cert10lts

digiumcertified_asteriskMatch11.6cert2

digiumcertified_asteriskMatch11.6cert2lts

digiumcertified_asteriskMatch11.6cert3

digiumcertified_asteriskMatch11.6cert3lts

digiumcertified_asteriskMatch11.6cert4lts

digiumcertified_asteriskMatch11.6cert5lts

digiumcertified_asteriskMatch11.6cert6lts

digiumcertified_asteriskMatch11.6cert7lts

digiumcertified_asteriskMatch11.6cert8lts

digiumcertified_asteriskMatch11.6cert9lts

digiumcertified_asteriskMatch11.6.0lts

digiumcertified_asteriskMatch11.6.0-

digiumcertified_asteriskMatch11.6.0rc1

digiumcertified_asteriskMatch11.6.0rc2

digiumcertified_asteriskMatch13.1cert1

VendorProductVersionCPE
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:*:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta1:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta2:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta3:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta4:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:beta5:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:rc2:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:rc3:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:rc4:*:*:*:*:*:*
digiumasterisk1.8.0cpe:2.3:a:digium:asterisk:1.8.0:rc5:*:*:*:*:*:*

Vendor	Product	Version	CPE
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:::::::*
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta1::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta2::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta3::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta4::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:beta5::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:rc2::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:rc3::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:rc4::::::
digium	asterisk	1.8.0	cpe:2.3:a:digium:asterisk:1.8.0:rc5::::::