CVE-2008-3263

Asterisk Open Source <1.2.30, 1.4.x <1.4.21.2 - DoS

Title source: llm

Description

The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (call-number exhaustion and CPU consumption) by quickly sending a large number of IAX2 (IAX) POKE requests.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Blake Cornell · perldoslinux

https://www.exploit-db.com/exploits/32095

View Code ZIP pw:eip

References (12)

[Third Party Advisory] http://security.gentoo.org/glsa/glsa-200905-01.xml

[Exploit] http://www.securityfocus.com/bid/30321

[Third Party Advisory] http://secunia.com/advisories/31194

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/43942

[Third Party Advisory] http://www.vupen.com/english/advisories/2008/2168/references

[Vendor Advisory] https://www.redhat.com/archives/fedora-package-announce/2008-July/msg00839.html

[Third Party Advisory] http://secunia.com/advisories/31178

[Exploit] http://downloads.securityfocus.com/vulnerabilities/exploits/30321.pl

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/494675/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id?1020535

[Various Sources] http://downloads.digium.com/pub/security/AST-2008-010.html

[Third Party Advisory] http://secunia.com/advisories/34982

Scores

EPSS 0.3610

EPSS Percentile 97.1%

Details

CWE

CWE-399

Status published

Products (49)

asterisk/asterisk 0.1.0

asterisk/asterisk 0.1.1

asterisk/asterisk 0.1.2

asterisk/asterisk 0.1.3

asterisk/asterisk 0.1.4

asterisk/asterisk 0.1.5

asterisk/asterisk 0.1.6

asterisk/asterisk 0.1.7

asterisk/asterisk 0.1.8

asterisk/asterisk 0.1.9

... and 39 more

Published Jul 22, 2008

Tracked Since Feb 18, 2026