CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1897

The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls, does not verify that an ACK response contains a call number matching the server's reply to a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed ACK response that does not complete a 3-way handshake. NOTE: this issue exists because of an incomplete fix for CVE-2008-1923.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.032

EPSS Ranking 86.4%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2008-1897

Asterisk » Asterisk Appliance Developer Kit » Version: 0.2

cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.2
Asterisk » Asterisk Appliance Developer Kit » Version: 0.3

cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.3
Asterisk » Asterisk Appliance Developer Kit » Version: 0.4

cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.4
Asterisk » Asterisk Appliance Developer Kit » Version: 0.5

cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.5
Asterisk » Asterisk Appliance Developer Kit » Version: 0.6

cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6
Asterisk » Asterisk Appliance Developer Kit » Version: 0.6.0

cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.6.0
Asterisk » Asterisk Appliance Developer Kit » Version: 0.7

cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.7
Asterisk » Asterisk Appliance Developer Kit » Version: 0.8

cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:0.8
Asterisk » Asterisk Business Edition » Version: Any

cpe:2.3:a:asterisk:asterisk_business_edition:*
Asterisk » Asterisk Business Edition » Version: a

cpe:2.3:a:asterisk:asterisk_business_edition:a
Asterisk » Asterisk Business Edition » Version: b.1.3.2

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2
Asterisk » Asterisk Business Edition » Version: b.1.3.3

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3
Asterisk » Asterisk Business Edition » Version: b.2.2.0

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0
Asterisk » Asterisk Business Edition » Version: b.2.2.1

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1
Asterisk » Asterisk Business Edition » Version: b.2.3.1

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1
Asterisk » Asterisk Business Edition » Version: b.2.3.2

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2
Asterisk » Asterisk Business Edition » Version: b.2.3.3

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3
Asterisk » Asterisk Business Edition » Version: b.2.3.4

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4
Asterisk » Asterisk Business Edition » Version: b.2.3.6

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.6
Asterisk » Asterisk Business Edition » Version: b.2.5.0

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0
Asterisk » Asterisk Business Edition » Version: c.1.0

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0
Asterisk » Asterisk Business Edition » Version: c.1.6

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6
Asterisk » Asterisk Business Edition » Version: c.1.6.1

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.1
Asterisk » Asterisk Business Edition » Version: c.1.6.2

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.2
Asterisk » Asterisknow » Version: Any

cpe:2.3:a:asterisk:asterisknow:*
Asterisk » Asterisknow » Version: 1.0

cpe:2.3:a:asterisk:asterisknow:1.0
Asterisk » Asterisknow » Version: 1.0.1

cpe:2.3:a:asterisk:asterisknow:1.0.1
Asterisk » Open Source » Version: Any

cpe:2.3:a:asterisk:open_source:*
Asterisk » Open Source » Version: 1.0

cpe:2.3:a:asterisk:open_source:1.0
Asterisk » Open Source » Version: 1.0.0

cpe:2.3:a:asterisk:open_source:1.0.0
Asterisk » Open Source » Version: 1.0.1

cpe:2.3:a:asterisk:open_source:1.0.1
Asterisk » Open Source » Version: 1.0.11

cpe:2.3:a:asterisk:open_source:1.0.11
Asterisk » Open Source » Version: 1.0.11.1

cpe:2.3:a:asterisk:open_source:1.0.11.1
Asterisk » Open Source » Version: 1.0.12

cpe:2.3:a:asterisk:open_source:1.0.12
Asterisk » Open Source » Version: 1.0.2

cpe:2.3:a:asterisk:open_source:1.0.2
Asterisk » Open Source » Version: 1.0.3

cpe:2.3:a:asterisk:open_source:1.0.3
Asterisk » Open Source » Version: 1.0.3.4

cpe:2.3:a:asterisk:open_source:1.0.3.4
Asterisk » Open Source » Version: 1.0.4

cpe:2.3:a:asterisk:open_source:1.0.4
Asterisk » Open Source » Version: 1.0.5

cpe:2.3:a:asterisk:open_source:1.0.5
Asterisk » Open Source » Version: 1.0.6

cpe:2.3:a:asterisk:open_source:1.0.6
Asterisk » Open Source » Version: 1.0.7

cpe:2.3:a:asterisk:open_source:1.0.7
Asterisk » Open Source » Version: 1.0.8

cpe:2.3:a:asterisk:open_source:1.0.8
Asterisk » Open Source » Version: 1.0.9

cpe:2.3:a:asterisk:open_source:1.0.9
Asterisk » Open Source » Version: 1.2.0

cpe:2.3:a:asterisk:open_source:1.2.0
Asterisk » Open Source » Version: 1.2.1

cpe:2.3:a:asterisk:open_source:1.2.1
Asterisk » Open Source » Version: 1.2.10

cpe:2.3:a:asterisk:open_source:1.2.10
Asterisk » Open Source » Version: 1.2.11

cpe:2.3:a:asterisk:open_source:1.2.11
Asterisk » Open Source » Version: 1.2.12

cpe:2.3:a:asterisk:open_source:1.2.12
Asterisk » Open Source » Version: 1.2.12.1

cpe:2.3:a:asterisk:open_source:1.2.12.1
Asterisk » Open Source » Version: 1.2.13

cpe:2.3:a:asterisk:open_source:1.2.13
Asterisk » Open Source » Version: 1.2.14

cpe:2.3:a:asterisk:open_source:1.2.14
Asterisk » Open Source » Version: 1.2.15

cpe:2.3:a:asterisk:open_source:1.2.15
Asterisk » Open Source » Version: 1.2.16

cpe:2.3:a:asterisk:open_source:1.2.16
Asterisk » Open Source » Version: 1.2.17

cpe:2.3:a:asterisk:open_source:1.2.17
Asterisk » Open Source » Version: 1.2.18

cpe:2.3:a:asterisk:open_source:1.2.18
Asterisk » Open Source » Version: 1.2.19

cpe:2.3:a:asterisk:open_source:1.2.19
Asterisk » Open Source » Version: 1.2.2

cpe:2.3:a:asterisk:open_source:1.2.2
Asterisk » Open Source » Version: 1.2.20

cpe:2.3:a:asterisk:open_source:1.2.20
Asterisk » Open Source » Version: 1.2.21

cpe:2.3:a:asterisk:open_source:1.2.21
Asterisk » Open Source » Version: 1.2.21.1

cpe:2.3:a:asterisk:open_source:1.2.21.1
Asterisk » Open Source » Version: 1.2.22

cpe:2.3:a:asterisk:open_source:1.2.22
Asterisk » Open Source » Version: 1.2.23

cpe:2.3:a:asterisk:open_source:1.2.23
Asterisk » Open Source » Version: 1.2.24

cpe:2.3:a:asterisk:open_source:1.2.24
Asterisk » Open Source » Version: 1.2.25

cpe:2.3:a:asterisk:open_source:1.2.25
Asterisk » Open Source » Version: 1.2.26

cpe:2.3:a:asterisk:open_source:1.2.26
Asterisk » Open Source » Version: 1.2.26.1

cpe:2.3:a:asterisk:open_source:1.2.26.1
Asterisk » Open Source » Version: 1.2.26.2

cpe:2.3:a:asterisk:open_source:1.2.26.2
Asterisk » Open Source » Version: 1.2.3

cpe:2.3:a:asterisk:open_source:1.2.3
Asterisk » Open Source » Version: 1.2.4

cpe:2.3:a:asterisk:open_source:1.2.4
Asterisk » Open Source » Version: 1.2.5

cpe:2.3:a:asterisk:open_source:1.2.5
Asterisk » Open Source » Version: 1.2.6

cpe:2.3:a:asterisk:open_source:1.2.6
Asterisk » Open Source » Version: 1.2.7

cpe:2.3:a:asterisk:open_source:1.2.7
Asterisk » Open Source » Version: 1.2.7.1

cpe:2.3:a:asterisk:open_source:1.2.7.1
Asterisk » Open Source » Version: 1.2.8

cpe:2.3:a:asterisk:open_source:1.2.8
Asterisk » Open Source » Version: 1.2.9

cpe:2.3:a:asterisk:open_source:1.2.9
Asterisk » Open Source » Version: 1.2.9.1

cpe:2.3:a:asterisk:open_source:1.2.9.1
Asterisk » Open Source » Version: 1.4.0

cpe:2.3:a:asterisk:open_source:1.4.0
Asterisk » Open Source » Version: 1.4.1

cpe:2.3:a:asterisk:open_source:1.4.1
Asterisk » Open Source » Version: 1.4.10

cpe:2.3:a:asterisk:open_source:1.4.10
Asterisk » Open Source » Version: 1.4.10.1

cpe:2.3:a:asterisk:open_source:1.4.10.1
Asterisk » Open Source » Version: 1.4.11

cpe:2.3:a:asterisk:open_source:1.4.11
Asterisk » Open Source » Version: 1.4.12

cpe:2.3:a:asterisk:open_source:1.4.12
Asterisk » Open Source » Version: 1.4.12.1

cpe:2.3:a:asterisk:open_source:1.4.12.1
Asterisk » Open Source » Version: 1.4.13

cpe:2.3:a:asterisk:open_source:1.4.13
Asterisk » Open Source » Version: 1.4.14

cpe:2.3:a:asterisk:open_source:1.4.14
Asterisk » Open Source » Version: 1.4.15

cpe:2.3:a:asterisk:open_source:1.4.15
Asterisk » Open Source » Version: 1.4.16

cpe:2.3:a:asterisk:open_source:1.4.16
Asterisk » Open Source » Version: 1.4.16.1

cpe:2.3:a:asterisk:open_source:1.4.16.1
Asterisk » Open Source » Version: 1.4.16.2

cpe:2.3:a:asterisk:open_source:1.4.16.2
Asterisk » Open Source » Version: 1.4.17

cpe:2.3:a:asterisk:open_source:1.4.17
Asterisk » Open Source » Version: 1.4.18

cpe:2.3:a:asterisk:open_source:1.4.18
Asterisk » Open Source » Version: 1.4.18.1

cpe:2.3:a:asterisk:open_source:1.4.18.1
Asterisk » S800i » Version: Any

cpe:2.3:a:asterisk:s800i:*
Asterisk » S800i » Version: 1.0

cpe:2.3:a:asterisk:s800i:1.0
Asterisk » S800i » Version: 1.0.1

cpe:2.3:a:asterisk:s800i:1.0.1
Asterisk » S800i » Version: 1.0.2

cpe:2.3:a:asterisk:s800i:1.0.2
Asterisk » S800i » Version: 1.0.3

cpe:2.3:a:asterisk:s800i:1.0.3
Asterisk » S800i » Version: 1.0.3.3

cpe:2.3:a:asterisk:s800i:1.0.3.3
Asterisk » S800i » Version: 1.1.0

cpe:2.3:a:asterisk:s800i:1.1.0
Asterisk » S800i » Version: 1.1.0.1

cpe:2.3:a:asterisk:s800i:1.1.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1897

Products

Pricing

Contact Us