CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3558 matches found

Tenable Nessus•added 2008/07/25 12:0 a.m.•200 views

Asterisk IAX2 (IAX) POKE Request Saturation Resource Exhaustion Remote DoS

The version of Asterisk running on the remote host consumes an IAX2 call number while waiting for an ACK packet in response to a PONG packet. By flooding the affected service with POKE requests, an unauthenticated, remote attacker can leverage this issue to exhaust all available call numbers and...

7.8CVSS5.5AI score0.28EPSS

SaveExploits2References3

OSV•added 2008/07/24 3:41 p.m.•5 views

DEBIAN-CVE-2008-3264

The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers t...

7.8CVSS6.8AI score0.0338EPSS

SaveExploits1References1

Prion•added 2008/07/24 3:41 p.m.•25 views

Server side request forgery (ssrf)

7.8CVSS6.7AI score0.0338EPSS

SaveExploits1References11Affected Software4

NVD•added 2008/07/24 3:41 p.m.•21 views

CVE-2008-3264

7.8CVSS6.4AI score0.0338EPSS

SaveExploits1References11

OSV•added 2008/07/24 3:41 p.m.•7 views

CVE-2008-3264

6.4AI score

SaveExploits0References11

Cvelist•added 2008/07/24 3:18 p.m.•32 views

CVE-2008-3264

6.3AI score0.0338EPSS

SaveExploits1References11

CVE•added 2008/07/24 3:18 p.m.•77 views

CVE-2008-3264

CVE-2008-3264 describes a DoS via the IAX2 FWDOWNL (firmware download) path in Asterisk and related packages. Affected: Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer...

7.8CVSS6.3AI score0.0338EPSS

SaveExploits1References11Affected Software4

Debian CVE•added 2008/07/24 3:18 p.m.•40 views

CVE-2008-3264

7.8CVSS6.1AI score0.0338EPSS

SaveExploits1

Fedora•added 2008/07/24 2:11 a.m.•38 views

[SECURITY] Fedora 8 Update: asterisk-1.4.21.2-1.fc8

Asterisk is a complete PBX in software. It runs on Linux and provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware...

7.8CVSS1.1AI score0.28EPSS

SaveExploits3

securityvulns•added 2008/07/24 12:0 a.m.•63 views

AST-2008-010: Asterisk IAX 'POKE' resource exhaustion

Asterisk Project Security Advisory - AST-2008-010 +------------------------------------------------------------------------+ | Product | Asterisk | |----------------------+-------------------------------------------------| | Summary | Asterisk IAX 'POKE' resource exhaustion |...

7.8CVSS0.4AI score0.28EPSS

SaveExploits2

securityvulns•added 2008/07/24 12:0 a.m.•39 views

Asterisk multiple security vulnerabilities

Traffic amplification, DoS with resouurces exhaustion...

7.8CVSS2.4AI score0.28EPSS

SaveExploits3References1Affected Software1

Tenable Nessus•added 2008/07/24 12:0 a.m.•33 views

Fedora 8 : asterisk-1.4.21.2-1.fc8 (2008-6676)

Update to 1.4.21.2 to fix CVE-2008-3263 / AST-2008-010 and CVE-2008-3264 / AST-2008-011. AST-2008-010: Asterisk IAX 'POKE' resource exhaustion - http://downloads.digium.com/pub/security/AST-2008-010.html AST-2008-011: Traffic amplification in IAX2 firmware provisioning system -...

7.8CVSS5.3AI score0.28EPSS

SaveExploits3References5

Tenable Nessus•added 2008/07/24 12:0 a.m.•38 views

Asterisk IAX2 FWDOWNL Request Spoofing Remote DoS

The firmware download protocol implemented in the version of Asterisk running on the remote host does not initiate a handshake. By spoofing an IAX2 FWDOWNL request, an unauthenticated, remote attacker may be able to leverage this issue to flood a third-party host with unwanted firmware packets fr...

7.8CVSS5.5AI score0.0338EPSS

SaveExploits1References3

seebug.org•added 2008/07/23 12:0 a.m.•31 views

Asterisk IAX 'POKE'请求远程拒绝服务漏洞

BUGTRAQ ID: 30321 CNCAN ID：CNCAN-2008072205 Asterisk是开放源码的软件PBX，支持各种VoIP协议和设备。 Asterisk处理多个IAX 'POKE'请求存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。攻击者可以发送持续的'POKE'请求流可导致服务程序消耗大量处理器资源，造成应用程序停止响应，触发拒绝服务攻击。 Asterisk Asterisk Business Edition C.1.8.1 Asterisk Asterisk Business Edition C.1.6.2 Asterisk Asterisk...

6.9AI score

SaveExploits0

Prion•added 2008/07/22 11:41 p.m.•22 views

Design/Logic Flaw

The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a...

7.8CVSS6.7AI score0.28EPSS

SaveExploits2References12Affected Software1

NVD•added 2008/07/22 11:41 p.m.•25 views

CVE-2008-3263

7.8CVSS6.4AI score0.28EPSS

SaveExploits2References12

UbuntuCve•added 2008/07/22 11:41 p.m.•32 views

CVE-2008-3263

7.8CVSS5.9AI score0.28EPSS

SaveExploits2References1

OSV•added 2008/07/22 11:41 p.m.•10 views

CVE-2008-3263

6.4AI score

SaveExploits0References12

Cvelist•added 2008/07/22 11:0 p.m.•36 views

CVE-2008-3263

6.2AI score0.28EPSS

SaveExploits2References12

Debian CVE•added 2008/07/22 11:0 p.m.•50 views

CVE-2008-3263

7.8CVSS6.1AI score0.28EPSS

SaveExploits2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by