CVE-2008-2119

Опубликовано: 04 июн. 2008

Источник: nvd

CVSS2: 4.3

EPSS Средний

Описание

Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*

Версия до b2.5.2 (включая)

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:*:*:*:*:*:*:*:*

Версия до 1.2.28 (включая)

cpe:2.3:a:asterisk:open_source:1.0:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.8:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.9:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.11:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.11.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.0.12:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.0:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.0beta1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.0beta2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.10:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.11:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.12:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.12.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.13:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.14:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.15:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.16:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.17:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.18:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.19:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.20:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.21:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.21.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.22:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.23:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.24:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.25:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.13998

Средний

4.3 Medium

CVSS2

Дефекты

CWE-20

Связанные уязвимости

CVE-2008-2119

ubuntu

больше 17 лет назад

CVE-2008-2119

debian

больше 17 лет назад

Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Editio ...

GHSA-rh4w-35r5-ffvh

github

больше 3 лет назад

EPSS

Процентиль: 94%

0.13998

Средний

4.3 Medium

CVSS2

Дефекты

CWE-20