CVEvulnerability

CVE-2008-0095

5.0 MEDIUM Published 2008-01-08 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-01-08
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference.

Affected configurations

• asterisk asterisk appliance developer kit (<= 1.4 revision 95945) • asterisk asterisk business edition (<= c.1.0beta7) • asterisk asterisknow (<= beta 6) • asterisk open source (<= 1.4.16) • asterisk s800i (<= 1.0.3.3)

Related

Weakness · not in database (1)

References