Lucene search

MitreCVE-2008-2119

HistoryJun 04, 2008 - 7:32 p.m.

CVE-2008-2119

2008-06-0419:32:00

CWE-20

mitre

web.nvd.nist.gov

asterisk

open source

denial of service

vulnerability

sip

invite

cve-2008-2119

nvd

security

remote attackers

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

6.3

Confidence

Low

EPSS

0.013

Percentile

86.1%

JSON

Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.

Affected configurations

Nvd

Node

asteriskasterisk_business_editionRange≤b2.5.2

asteriskasterisk_business_editionMatchb.1.3.2

asteriskasterisk_business_editionMatchb.1.3.3

asteriskasterisk_business_editionMatchb.2.2.0

asteriskasterisk_business_editionMatchb.2.2.1

asteriskasterisk_business_editionMatchb.2.3.1

asteriskasterisk_business_editionMatchb.2.3.2

asteriskasterisk_business_editionMatchb.2.3.3

asteriskasterisk_business_editionMatchb.2.3.4

asteriskasterisk_business_editionMatchb.2.5.0

asteriskasterisk_business_editionMatchb2.5.1

asteriskopen_sourceRange≤1.2.28

asteriskopen_sourceMatch1.0

asteriskopen_sourceMatch1.0.0

asteriskopen_sourceMatch1.0.1

asteriskopen_sourceMatch1.0.2

asteriskopen_sourceMatch1.0.3

asteriskopen_sourceMatch1.0.4

asteriskopen_sourceMatch1.0.5

asteriskopen_sourceMatch1.0.6

asteriskopen_sourceMatch1.0.7

asteriskopen_sourceMatch1.0.8

asteriskopen_sourceMatch1.0.9

asteriskopen_sourceMatch1.0.11

asteriskopen_sourceMatch1.0.11.1

asteriskopen_sourceMatch1.0.12

asteriskopen_sourceMatch1.2.0

asteriskopen_sourceMatch1.2.0beta1

asteriskopen_sourceMatch1.2.0beta2

asteriskopen_sourceMatch1.2.1

asteriskopen_sourceMatch1.2.2

asteriskopen_sourceMatch1.2.10

asteriskopen_sourceMatch1.2.11

asteriskopen_sourceMatch1.2.12

asteriskopen_sourceMatch1.2.12.1

asteriskopen_sourceMatch1.2.13

asteriskopen_sourceMatch1.2.14

asteriskopen_sourceMatch1.2.15

asteriskopen_sourceMatch1.2.16

asteriskopen_sourceMatch1.2.17

asteriskopen_sourceMatch1.2.18

asteriskopen_sourceMatch1.2.19

asteriskopen_sourceMatch1.2.20

asteriskopen_sourceMatch1.2.21

asteriskopen_sourceMatch1.2.21.1

asteriskopen_sourceMatch1.2.22

asteriskopen_sourceMatch1.2.23

asteriskopen_sourceMatch1.2.24

asteriskopen_sourceMatch1.2.25

asteriskopen_sourceMatch1.2.26

asteriskopen_sourceMatch1.2.26.1

asteriskopen_sourceMatch1.2.26.2

asteriskopen_sourceMatch1.2.27

VendorProductVersionCPE
asteriskasterisk_business_edition*cpe:2.3:a:asterisk:asterisk_business_edition:*:*:*:*:*:*:*:*
asteriskasterisk_business_editionb.1.3.2cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:*:*:*:*:*:*:*
asteriskasterisk_business_editionb.1.3.3cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:*:*:*:*:*:*:*
asteriskasterisk_business_editionb.2.2.0cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:*:*:*:*:*:*:*
asteriskasterisk_business_editionb.2.2.1cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:*:*:*:*:*:*:*
asteriskasterisk_business_editionb.2.3.1cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:*:*:*:*:*:*:*
asteriskasterisk_business_editionb.2.3.2cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:*:*:*:*:*:*:*
asteriskasterisk_business_editionb.2.3.3cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:*:*:*:*:*:*:*
asteriskasterisk_business_editionb.2.3.4cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:*:*:*:*:*:*:*
asteriskasterisk_business_editionb.2.5.0cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
asterisk	asterisk_business_edition	*	cpe:2.3:a:asterisk:asterisk_business_edition::::::::
asterisk	asterisk_business_edition	b.1.3.2	cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.2:::::::*
asterisk	asterisk_business_edition	b.1.3.3	cpe:2.3:a:asterisk:asterisk_business_edition:b.1.3.3:::::::*
asterisk	asterisk_business_edition	b.2.2.0	cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.0:::::::*
asterisk	asterisk_business_edition	b.2.2.1	cpe:2.3:a:asterisk:asterisk_business_edition:b.2.2.1:::::::*
asterisk	asterisk_business_edition	b.2.3.1	cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.1:::::::*
asterisk	asterisk_business_edition	b.2.3.2	cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.2:::::::*
asterisk	asterisk_business_edition	b.2.3.3	cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.3:::::::*
asterisk	asterisk_business_edition	b.2.3.4	cpe:2.3:a:asterisk:asterisk_business_edition:b.2.3.4:::::::*
asterisk	asterisk_business_edition	b.2.5.0	cpe:2.3:a:asterisk:asterisk_business_edition:b.2.5.0:::::::*