CVE-2008-3264

The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (traffic amplification) via an IAX2 FWDOWNL request.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
VendorProductVersion
asteriskasterisk_appliance_developer_kit
0.2
asteriskasterisk_appliance_developer_kit
0.3
asteriskasterisk_appliance_developer_kit
0.4
asteriskasterisk_appliance_developer_kit
0.5
asteriskasterisk_appliance_developer_kit
0.6
asteriskasterisk_appliance_developer_kit
0.6.0
asteriskasterisk_appliance_developer_kit
0.7
asteriskasterisk_appliance_developer_kit
0.8
asteriskopen_source
1.0
asteriskopen_source
1.0.0
asteriskopen_source
1.0.1
asteriskopen_source
1.0.2
asteriskopen_source
1.0.3
asteriskopen_source
1.0.3.4
asteriskopen_source
1.0.4
asteriskopen_source
1.0.5
asteriskopen_source
1.0.6
asteriskopen_source
1.0.7
asteriskopen_source
1.0.8
asteriskopen_source
1.0.9
asteriskopen_source
1.0.11
asteriskopen_source
1.0.11.1
asteriskopen_source
1.0.12
asteriskopen_source
1.2.0
asteriskopen_source
1.2.0beta1:beta1
asteriskopen_source
1.2.0beta2:beta2
asteriskopen_source
1.2.1
asteriskopen_source
1.2.2
asteriskopen_source
1.2.3
asteriskopen_source
1.2.4
asteriskopen_source
1.2.5
asteriskopen_source
1.2.6
asteriskopen_source
1.2.7
asteriskopen_source
1.2.7.1
asteriskopen_source
1.2.8
asteriskopen_source
1.2.9
asteriskopen_source
1.2.9.1
asteriskopen_source
1.2.10
asteriskopen_source
1.2.11
asteriskopen_source
1.2.12
asteriskopen_source
1.2.12.1
asteriskopen_source
1.2.13
asteriskopen_source
1.2.14
asteriskopen_source
1.2.15
asteriskopen_source
1.2.16
asteriskopen_source
1.2.17
asteriskopen_source
1.2.18
asteriskopen_source
1.2.19
asteriskopen_source
1.2.20
asteriskopen_source
1.2.21
asteriskopen_source
1.2.21.1
asteriskopen_source
1.2.22
asteriskopen_source
1.2.23
asteriskopen_source
1.2.24
asteriskopen_source
1.2.25
asteriskopen_source
1.2.26
asteriskopen_source
1.2.26.1
asteriskopen_source
1.2.26.2
asteriskopen_source
1.2.27
asteriskopen_source
1.2.28
asteriskopen_source
1.2.29
asteriskopen_source
1.4.0
asteriskopen_source
1.4.1
asteriskopen_source
1.4.2
asteriskopen_source
1.4.3
asteriskopen_source
1.4.4
asteriskopen_source
1.4.5
asteriskopen_source
1.4.6
asteriskopen_source
1.4.7
asteriskopen_source
1.4.7.1
asteriskopen_source
1.4.8
asteriskopen_source
1.4.9
asteriskopen_source
1.4.10
asteriskopen_source
1.4.10.1
asteriskopen_source
1.4.11
asteriskopen_source
1.4.12
asteriskopen_source
1.4.12.1
asteriskopen_source
1.4.13
asteriskopen_source
1.4.14
asteriskopen_source
1.4.15
asteriskopen_source
1.4.16
asteriskopen_source
1.4.16.1
asteriskopen_source
1.4.16.2
asteriskopen_source
1.4.17
asteriskopen_source
1.4.18
asteriskopen_source
1.4.18.1
asteriskopen_source
1.4.19
asteriskopen_source
1.4.19.1
asteriskopen_source
1.4.19_rc3:_rc3
asteriskopen_source
1.4_revision_95946:_revision_95946
asteriskopen_source
1.4beta:beta
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
asterisk
bullseye
1:16.28.0~dfsg-0+deb11u4
fixed
bullseye (security)
1:16.28.0~dfsg-0+deb11u5
fixed
sid
1:22.0.0~dfsg+~cs6.14.60671435-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
asterisk
karmic
not-affected
jaunty
not-affected
intrepid
ignored
hardy
Fixed 1:1.4.17~dfsg-2ubuntu1.1
released
gutsy
ignored
feisty
ignored
dapper
ignored