CVE-2008-2543
05.06.2008, 20:32
The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets.Enginsight
| Vendor | Product | Version |
|---|---|---|
| asterisk | asterisk-addons | 1.2.0 |
| asterisk | asterisk-addons | 1.2.1 |
| asterisk | asterisk-addons | 1.2.2 |
| asterisk | asterisk-addons | 1.2.3 |
| asterisk | asterisk-addons | 1.2.4 |
| asterisk | asterisk-addons | 1.2.5 |
| asterisk | asterisk-addons | 1.2.6 |
| asterisk | asterisk-addons | 1.2.7 |
| asterisk | asterisk-addons | 1.2.8 |
| asterisk | asterisk-addons | 1.4.0 |
| asterisk | asterisk-addons | 1.4.1 |
| asterisk | asterisk-addons | 1.4.2 |
| asterisk | asterisk-addons | 1.4.3 |
| asterisk | asterisk-addons | 1.4.4 |
| asterisk | asterisk-addons | 1.4.5 |
| asterisk | asterisk-addons | 1.4.6 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Common Weakness Enumeration
References