CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1923

The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.015

EPSS Ranking 80.3%

CVSS Severity

CVSS v2 Score 7.1

References

Products affected by CVE-2008-1923

Asterisk » Asterisk Appliance Developer Kit » Version: Any

cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:*
Asterisk » Asterisk Business Edition » Version: Any

cpe:2.3:a:asterisk:asterisk_business_edition:*
Asterisk » Asterisk Business Edition » Version: a

cpe:2.3:a:asterisk:asterisk_business_edition:a
Asterisk » Asterisk Business Edition » Version: b.1.3.2

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2
Asterisk » Asterisk Business Edition » Version: b.1.3.3

cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3
Asterisk » Asterisk Business Edition » Version: b.2.2.0

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0
Asterisk » Asterisk Business Edition » Version: b.2.2.1

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1
Asterisk » Asterisk Business Edition » Version: b.2.3.1

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1
Asterisk » Asterisk Business Edition » Version: b.2.3.2

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2
Asterisk » Asterisk Business Edition » Version: b.2.3.3

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3
Asterisk » Asterisk Business Edition » Version: b.2.3.4

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4
Asterisk » Asterisk Business Edition » Version: b.2.5.0

cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0
Asterisk » Asterisk Business Edition » Version: c.1.0-beta7

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta7
Asterisk » Asterisk Business Edition » Version: c.1.0-beta8

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0-beta8
Asterisk » Asterisk Business Edition » Version: c.1.0beta7

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.0beta7
Asterisk » Asterisk Business Edition » Version: c.1.6.1

cpe:2.3:a:asterisk:asterisk_business_edition:c.1.6.1
Asterisk » Asterisknow » Version: Any

cpe:2.3:a:asterisk:asterisknow:*
Asterisk » Asterisknow » Version: 1.0

cpe:2.3:a:asterisk:asterisknow:1.0
Asterisk » Asterisknow » Version: 1.0.1

cpe:2.3:a:asterisk:asterisknow:1.0.1
Asterisk » Open Source » Version: 1.0

cpe:2.3:a:asterisk:open_source:1.0
Asterisk » Open Source » Version: 1.0.0

cpe:2.3:a:asterisk:open_source:1.0.0
Asterisk » Open Source » Version: 1.0.1

cpe:2.3:a:asterisk:open_source:1.0.1
Asterisk » Open Source » Version: 1.0.11

cpe:2.3:a:asterisk:open_source:1.0.11
Asterisk » Open Source » Version: 1.0.11.1

cpe:2.3:a:asterisk:open_source:1.0.11.1
Asterisk » Open Source » Version: 1.0.12

cpe:2.3:a:asterisk:open_source:1.0.12
Asterisk » Open Source » Version: 1.0.2

cpe:2.3:a:asterisk:open_source:1.0.2
Asterisk » Open Source » Version: 1.0.3

cpe:2.3:a:asterisk:open_source:1.0.3
Asterisk » Open Source » Version: 1.0.4

cpe:2.3:a:asterisk:open_source:1.0.4
Asterisk » Open Source » Version: 1.0.5

cpe:2.3:a:asterisk:open_source:1.0.5
Asterisk » Open Source » Version: 1.0.6

cpe:2.3:a:asterisk:open_source:1.0.6
Asterisk » Open Source » Version: 1.0.7

cpe:2.3:a:asterisk:open_source:1.0.7
Asterisk » Open Source » Version: 1.0.8

cpe:2.3:a:asterisk:open_source:1.0.8
Asterisk » Open Source » Version: 1.0.9

cpe:2.3:a:asterisk:open_source:1.0.9
Asterisk » Open Source » Version: 1.2.0

cpe:2.3:a:asterisk:open_source:1.2.0
Asterisk » Open Source » Version: 1.2.1

cpe:2.3:a:asterisk:open_source:1.2.1
Asterisk » Open Source » Version: 1.2.10

cpe:2.3:a:asterisk:open_source:1.2.10
Asterisk » Open Source » Version: 1.2.11

cpe:2.3:a:asterisk:open_source:1.2.11
Asterisk » Open Source » Version: 1.2.12

cpe:2.3:a:asterisk:open_source:1.2.12
Asterisk » Open Source » Version: 1.2.12.1

cpe:2.3:a:asterisk:open_source:1.2.12.1
Asterisk » Open Source » Version: 1.2.13

cpe:2.3:a:asterisk:open_source:1.2.13
Asterisk » Open Source » Version: 1.2.14

cpe:2.3:a:asterisk:open_source:1.2.14
Asterisk » Open Source » Version: 1.2.15

cpe:2.3:a:asterisk:open_source:1.2.15
Asterisk » Open Source » Version: 1.2.16

cpe:2.3:a:asterisk:open_source:1.2.16
Asterisk » Open Source » Version: 1.2.17

cpe:2.3:a:asterisk:open_source:1.2.17
Asterisk » Open Source » Version: 1.2.18

cpe:2.3:a:asterisk:open_source:1.2.18
Asterisk » Open Source » Version: 1.2.19

cpe:2.3:a:asterisk:open_source:1.2.19
Asterisk » Open Source » Version: 1.2.2

cpe:2.3:a:asterisk:open_source:1.2.2
Asterisk » Open Source » Version: 1.2.20

cpe:2.3:a:asterisk:open_source:1.2.20
Asterisk » Open Source » Version: 1.2.21

cpe:2.3:a:asterisk:open_source:1.2.21
Asterisk » Open Source » Version: 1.2.21.1

cpe:2.3:a:asterisk:open_source:1.2.21.1
Asterisk » Open Source » Version: 1.2.22

cpe:2.3:a:asterisk:open_source:1.2.22
Asterisk » Open Source » Version: 1.2.23

cpe:2.3:a:asterisk:open_source:1.2.23
Asterisk » Open Source » Version: 1.2.24

cpe:2.3:a:asterisk:open_source:1.2.24
Asterisk » Open Source » Version: 1.2.25

cpe:2.3:a:asterisk:open_source:1.2.25
Asterisk » Open Source » Version: 1.2.26

cpe:2.3:a:asterisk:open_source:1.2.26
Asterisk » Open Source » Version: 1.2.26.1

cpe:2.3:a:asterisk:open_source:1.2.26.1
Asterisk » Open Source » Version: 1.2.26.2

cpe:2.3:a:asterisk:open_source:1.2.26.2
Asterisk » Open Source » Version: 1.2.27

cpe:2.3:a:asterisk:open_source:1.2.27
Asterisk » Open Source » Version: 1.2.28

cpe:2.3:a:asterisk:open_source:1.2.28
Asterisk » Open Source » Version: 1.2.3

cpe:2.3:a:asterisk:open_source:1.2.3
Asterisk » Open Source » Version: 1.2.4

cpe:2.3:a:asterisk:open_source:1.2.4
Asterisk » Open Source » Version: 1.2.5

cpe:2.3:a:asterisk:open_source:1.2.5
Asterisk » Open Source » Version: 1.2.6

cpe:2.3:a:asterisk:open_source:1.2.6
Asterisk » Open Source » Version: 1.2.7

cpe:2.3:a:asterisk:open_source:1.2.7
Asterisk » Open Source » Version: 1.2.7.1

cpe:2.3:a:asterisk:open_source:1.2.7.1
Asterisk » Open Source » Version: 1.2.8

cpe:2.3:a:asterisk:open_source:1.2.8
Asterisk » Open Source » Version: 1.2.9

cpe:2.3:a:asterisk:open_source:1.2.9
Asterisk » Open Source » Version: 1.2.9.1

cpe:2.3:a:asterisk:open_source:1.2.9.1
Asterisk » Open Source » Version: 1.4.0

cpe:2.3:a:asterisk:open_source:1.4.0
Asterisk » Open Source » Version: 1.4.1

cpe:2.3:a:asterisk:open_source:1.4.1
Asterisk » Open Source » Version: 1.4.10

cpe:2.3:a:asterisk:open_source:1.4.10
Asterisk » Open Source » Version: 1.4.10.1

cpe:2.3:a:asterisk:open_source:1.4.10.1
Asterisk » Open Source » Version: 1.4.11

cpe:2.3:a:asterisk:open_source:1.4.11
Asterisk » Open Source » Version: 1.4.12

cpe:2.3:a:asterisk:open_source:1.4.12
Asterisk » Open Source » Version: 1.4.12.1

cpe:2.3:a:asterisk:open_source:1.4.12.1
Asterisk » Open Source » Version: 1.4.13

cpe:2.3:a:asterisk:open_source:1.4.13
Asterisk » Open Source » Version: 1.4.14

cpe:2.3:a:asterisk:open_source:1.4.14
Asterisk » Open Source » Version: 1.4.15

cpe:2.3:a:asterisk:open_source:1.4.15
Asterisk » Open Source » Version: 1.4.16

cpe:2.3:a:asterisk:open_source:1.4.16
Asterisk » Open Source » Version: 1.4.16.1

cpe:2.3:a:asterisk:open_source:1.4.16.1
Asterisk » Open Source » Version: 1.4.16.2

cpe:2.3:a:asterisk:open_source:1.4.16.2
Asterisk » Open Source » Version: 1.4.17

cpe:2.3:a:asterisk:open_source:1.4.17
Asterisk » Open Source » Version: 1.4.18

cpe:2.3:a:asterisk:open_source:1.4.18
Asterisk » Open Source » Version: 1.4.18.1

cpe:2.3:a:asterisk:open_source:1.4.18.1
Asterisk » Open Source » Version: 1.4.19

cpe:2.3:a:asterisk:open_source:1.4.19
Asterisk » Open Source » Version: 1.4.2

cpe:2.3:a:asterisk:open_source:1.4.2
Asterisk » Open Source » Version: 1.4.3

cpe:2.3:a:asterisk:open_source:1.4.3
Asterisk » Open Source » Version: 1.4.4

cpe:2.3:a:asterisk:open_source:1.4.4
Asterisk » Open Source » Version: 1.4.5

cpe:2.3:a:asterisk:open_source:1.4.5
Asterisk » Open Source » Version: 1.4.6

cpe:2.3:a:asterisk:open_source:1.4.6
Asterisk » Open Source » Version: 1.4.7

cpe:2.3:a:asterisk:open_source:1.4.7
Asterisk » Open Source » Version: 1.4.7.1

cpe:2.3:a:asterisk:open_source:1.4.7.1
Asterisk » Open Source » Version: 1.4.8

cpe:2.3:a:asterisk:open_source:1.4.8
Asterisk » Open Source » Version: 1.4.9

cpe:2.3:a:asterisk:open_source:1.4.9
Asterisk » S800i » Version: Any

cpe:2.3:a:asterisk:s800i:*
Asterisk » S800i » Version: 1.0

cpe:2.3:a:asterisk:s800i:1.0
Asterisk » S800i » Version: 1.0.1

cpe:2.3:a:asterisk:s800i:1.0.1
Asterisk » S800i » Version: 1.0.2

cpe:2.3:a:asterisk:s800i:1.0.2
Asterisk » S800i » Version: 1.0.3

cpe:2.3:a:asterisk:s800i:1.0.3
Asterisk » S800i » Version: 1.0.3.3

cpe:2.3:a:asterisk:s800i:1.0.3.3
Asterisk » S800i » Version: 1.1.0

cpe:2.3:a:asterisk:s800i:1.1.0
Asterisk » S800i » Version: 1.1.0.1

cpe:2.3:a:asterisk:s800i:1.1.0.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1923

Products

Pricing

Contact Us