CVE-2008-2119
04.06.2008, 19:32
Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.Enginsight
| Vendor | Product | Version |
|---|---|---|
| asterisk | open_source | 𝑥 ≤ 1.2.28 |
| asterisk | open_source | 1.0 |
| asterisk | open_source | 1.0.0 |
| asterisk | open_source | 1.0.1 |
| asterisk | open_source | 1.0.2 |
| asterisk | open_source | 1.0.3 |
| asterisk | open_source | 1.0.4 |
| asterisk | open_source | 1.0.5 |
| asterisk | open_source | 1.0.6 |
| asterisk | open_source | 1.0.7 |
| asterisk | open_source | 1.0.8 |
| asterisk | open_source | 1.0.9 |
| asterisk | open_source | 1.0.11 |
| asterisk | open_source | 1.0.11.1 |
| asterisk | open_source | 1.0.12 |
| asterisk | open_source | 1.2.0 |
| asterisk | open_source | 1.2.0beta1:beta1 |
| asterisk | open_source | 1.2.0beta2:beta2 |
| asterisk | open_source | 1.2.1 |
| asterisk | open_source | 1.2.2 |
| asterisk | open_source | 1.2.10 |
| asterisk | open_source | 1.2.11 |
| asterisk | open_source | 1.2.12 |
| asterisk | open_source | 1.2.12.1 |
| asterisk | open_source | 1.2.13 |
| asterisk | open_source | 1.2.14 |
| asterisk | open_source | 1.2.15 |
| asterisk | open_source | 1.2.16 |
| asterisk | open_source | 1.2.17 |
| asterisk | open_source | 1.2.18 |
| asterisk | open_source | 1.2.19 |
| asterisk | open_source | 1.2.20 |
| asterisk | open_source | 1.2.21 |
| asterisk | open_source | 1.2.21.1 |
| asterisk | open_source | 1.2.22 |
| asterisk | open_source | 1.2.23 |
| asterisk | open_source | 1.2.24 |
| asterisk | open_source | 1.2.25 |
| asterisk | open_source | 1.2.26 |
| asterisk | open_source | 1.2.26.1 |
| asterisk | open_source | 1.2.26.2 |
| asterisk | open_source | 1.2.27 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References