CVE-2008-5558

Опубликовано: 17 дек. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.5:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.3:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.26:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.26:netsec:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.26.1:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.26.1:netsec:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.26.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.26.2:netsec:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.27:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.28:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.29:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.30:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.30.2:*:*:*:*:*:*:*

cpe:2.3:a:asterisk:open_source:1.2.30.3:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01959

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2008-5558

ubuntu

больше 17 лет назад

CVE-2008-5558

debian

больше 17 лет назад

Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2. ...

GHSA-rvg3-83c6-fx75

github

около 4 лет назад

EPSS

Процентиль: 78%

0.01959

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-287