CVEvulnerability

CVE-2008-1923

7.1 HIGH Published 2008-04-23 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-04-23
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses
CWE-16

Description

The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message.

Affected configurations

• asterisk asterisk appliance developer kit • asterisk asterisk business edition (<= b2.5.1) • asterisk asterisk business edition (<= c1.8.0) • asterisk asterisk business edition a • asterisk asterisk business edition b.1.3.2 • asterisk asterisk business edition b.1.3.3 • asterisk asterisk business edition b.2.2.0 • asterisk asterisk business edition b.2.2.1 • asterisk asterisk business edition b.2.3.1 • asterisk asterisk business edition b.2.3.2 • asterisk asterisk business edition b.2.3.3 • asterisk asterisk business edition b.2.3.4 • asterisk asterisk business edition b.2.5.0 • asterisk asterisk business edition c.1.0-beta7 • asterisk asterisk business edition c.1.0-beta8 • asterisk asterisk business edition c.1.0beta7 • asterisk asterisk business edition c.1.6.1 • asterisk asterisknow (<= 1.0.2) • asterisk asterisknow 1.0 • asterisk asterisknow 1.0.1 • asterisk open source 1.0 • asterisk open source 1.0.0 • asterisk open source 1.0.1 • asterisk open source 1.0.2 • asterisk open source 1.0.3 • asterisk open source 1.0.4 • asterisk open source 1.0.5 • asterisk open source 1.0.6 • asterisk open source 1.0.7 • asterisk open source 1.0.8 • asterisk open source 1.0.9 • asterisk open source 1.0.11 • asterisk open source 1.0.11.1 • asterisk open source 1.0.12 • asterisk open source 1.2.0 • asterisk open source 1.2.1 • asterisk open source 1.2.2 • asterisk open source 1.2.3 • asterisk open source 1.2.4 • asterisk open source 1.2.5 • asterisk open source 1.2.6 • asterisk open source 1.2.7 • asterisk open source 1.2.7.1 • asterisk open source 1.2.8 • asterisk open source 1.2.9 • asterisk open source 1.2.9.1 • asterisk open source 1.2.10 • asterisk open source 1.2.11 • asterisk open source 1.2.12 • asterisk open source 1.2.12.1 • asterisk open source 1.2.13 • asterisk open source 1.2.14 • asterisk open source 1.2.15 • asterisk open source 1.2.16 • asterisk open source 1.2.17 • asterisk open source 1.2.18 • asterisk open source 1.2.19 • asterisk open source 1.2.20 • asterisk open source 1.2.21 • asterisk open source 1.2.21.1 … and 43 more

Related

Weakness · not in database (1)

References