7.8

CVE-2009-2346

The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263.

Data is provided by the National Vulnerability Database (NVD)
Asterisk ≫ Asterisk Versionb.1.3.2 Editionbusiness
Asterisk ≫ Asterisk Versionb.1.3.3 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.2.0 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.2.1 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.3.1 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.3.2 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.3.3 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.3.4 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.3.5 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.3.6 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.5.1 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.5.3 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.5.4 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.5.5 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.5.6 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.5.8 Editionbusiness
Asterisk ≫ Asterisk Versionb.2.5.9 Editionbusiness
Asterisk ≫ Asterisk Versionc.1.0_beta7 Editionbusiness
Asterisk ≫ Asterisk Versionc.1.0_beta8 Editionbusiness
Asterisk ≫ Asterisk Versionc.1.6 Editionbusiness
Asterisk ≫ Asterisk Versionc.1.6.1 Editionbusiness
Asterisk ≫ Asterisk Versionc.1.6.2 Editionbusiness
Asterisk ≫ Asterisk Versionc.1.8.1 Editionbusiness
Asterisk ≫ Asterisk Versionc.1.10.3 Editionbusiness
Asterisk ≫ Asterisk Versionc.1.10.4 Editionbusiness
Asterisk ≫ Asterisk Versionc.1.10.5 Editionbusiness
Asterisk ≫ Asterisk Versionc.2.1.2.1 Editionbusiness
Asterisk ≫ Asterisk Versionc.2.3 Editionbusiness
Asterisk ≫ Asterisk Versionc.2.3.3 Editionbusiness
Asterisk ≫ Asterisk Versionc.2.4.2 Editionbusiness
Asterisk ≫ Asterisk Versionc.3.1.0 Editionbusiness
Asterisk ≫ Open Source Version1.2.0
Asterisk ≫ Open Source Version1.2.0 Updatebeta1
Asterisk ≫ Open Source Version1.2.0 Updatebeta2
Asterisk ≫ Open Source Version1.2.0 Updaterc1
Asterisk ≫ Open Source Version1.2.0 Updaterc2
Asterisk ≫ Open Source Version1.2.1
Asterisk ≫ Open Source Version1.2.2
Asterisk ≫ Open Source Version1.2.2 Updatenetsec
Asterisk ≫ Open Source Version1.2.3
Asterisk ≫ Open Source Version1.2.3 Updatenetsec
Asterisk ≫ Open Source Version1.2.4
Asterisk ≫ Open Source Version1.2.4 Updatenetsec
Asterisk ≫ Open Source Version1.2.5
Asterisk ≫ Open Source Version1.2.5 Updatenetsec
Asterisk ≫ Open Source Version1.2.6
Asterisk ≫ Open Source Version1.2.6 Updatenetsec
Asterisk ≫ Open Source Version1.2.7
Asterisk ≫ Open Source Version1.2.7 Updatenetsec
Asterisk ≫ Open Source Version1.2.7.1
Asterisk ≫ Open Source Version1.2.7.1 Updatenetsec
Asterisk ≫ Open Source Version1.2.8
Asterisk ≫ Open Source Version1.2.8 Updatenetsec
Asterisk ≫ Open Source Version1.2.9
Asterisk ≫ Open Source Version1.2.9.1
Asterisk ≫ Open Source Version1.2.9.1 Updatenetsec
Asterisk ≫ Open Source Version1.2.10
Asterisk ≫ Open Source Version1.2.10 Updatenetsec
Asterisk ≫ Open Source Version1.2.11
Asterisk ≫ Open Source Version1.2.11 Updatenetsec
Asterisk ≫ Open Source Version1.2.12
Asterisk ≫ Open Source Version1.2.12 Updatenetsec
Asterisk ≫ Open Source Version1.2.12.1
Asterisk ≫ Open Source Version1.2.12.1 Updatenetsec
Asterisk ≫ Open Source Version1.2.13
Asterisk ≫ Open Source Version1.2.13 Updatenetsec
Asterisk ≫ Open Source Version1.2.14
Asterisk ≫ Open Source Version1.2.14 Updatenetsec
Asterisk ≫ Open Source Version1.2.15
Asterisk ≫ Open Source Version1.2.15 Updatenetsec
Asterisk ≫ Open Source Version1.2.16
Asterisk ≫ Open Source Version1.2.16 Updatenetsec
Asterisk ≫ Open Source Version1.2.17
Asterisk ≫ Open Source Version1.2.17 Updatenetsec
Asterisk ≫ Open Source Version1.2.18
Asterisk ≫ Open Source Version1.2.18 Updatenetsec
Asterisk ≫ Open Source Version1.2.19
Asterisk ≫ Open Source Version1.2.19 Updatenetsec
Asterisk ≫ Open Source Version1.2.20
Asterisk ≫ Open Source Version1.2.20 Updatenetsec
Asterisk ≫ Open Source Version1.2.21
Asterisk ≫ Open Source Version1.2.21 Updatenetsec
Asterisk ≫ Open Source Version1.2.21.1
Asterisk ≫ Open Source Version1.2.21.1 Updatenetsec
Asterisk ≫ Open Source Version1.2.22
Asterisk ≫ Open Source Version1.2.22 Updatenetsec
Asterisk ≫ Open Source Version1.2.23
Asterisk ≫ Open Source Version1.2.23 Updatenetsec
Asterisk ≫ Open Source Version1.2.24
Asterisk ≫ Open Source Version1.2.24 Updatenetsec
Asterisk ≫ Open Source Version1.2.25
Asterisk ≫ Open Source Version1.2.25 Updatenetsec
Asterisk ≫ Open Source Version1.2.26
Asterisk ≫ Open Source Version1.2.26 Updatenetsec
Asterisk ≫ Open Source Version1.2.26.1
Asterisk ≫ Open Source Version1.2.26.1 Updatenetsec
Asterisk ≫ Open Source Version1.2.26.2
Asterisk ≫ Open Source Version1.2.26.2 Updatenetsec
Asterisk ≫ Open Source Version1.2.27
Asterisk ≫ Open Source Version1.2.28
Asterisk ≫ Open Source Version1.2.29
Asterisk ≫ Open Source Version1.2.30
Asterisk ≫ Open Source Version1.2.30.2
Asterisk ≫ Open Source Version1.2.30.3
Asterisk ≫ Open Source Version1.2.30.4
Asterisk ≫ Open Source Version1.2.31
Asterisk ≫ Open Source Version1.2.32
Asterisk ≫ Open Source Version1.2.33
Asterisk ≫ Open Source Version1.2.34
Asterisk ≫ Open Source Version1.4.0
Asterisk ≫ Open Source Version1.4.0 Updatebeta2
Asterisk ≫ Open Source Version1.4.0 Updatebeta3
Asterisk ≫ Open Source Version1.4.0 Updatebeta4
Asterisk ≫ Open Source Version1.4.1
Asterisk ≫ Open Source Version1.4.2
Asterisk ≫ Open Source Version1.4.3
Asterisk ≫ Open Source Version1.4.4
Asterisk ≫ Open Source Version1.4.5
Asterisk ≫ Open Source Version1.4.6
Asterisk ≫ Open Source Version1.4.7
Asterisk ≫ Open Source Version1.4.7.1
Asterisk ≫ Open Source Version1.4.8
Asterisk ≫ Open Source Version1.4.9
Asterisk ≫ Open Source Version1.4.10
Asterisk ≫ Open Source Version1.4.10.1
Asterisk ≫ Open Source Version1.4.11
Asterisk ≫ Open Source Version1.4.12
Asterisk ≫ Open Source Version1.4.12.1
Asterisk ≫ Open Source Version1.4.13
Asterisk ≫ Open Source Version1.4.14
Asterisk ≫ Open Source Version1.4.15
Asterisk ≫ Open Source Version1.4.16
Asterisk ≫ Open Source Version1.4.16.1
Asterisk ≫ Open Source Version1.4.16.2
Asterisk ≫ Open Source Version1.4.17
Asterisk ≫ Open Source Version1.4.18
Asterisk ≫ Open Source Version1.4.18.1
Asterisk ≫ Open Source Version1.4.19
Asterisk ≫ Open Source Version1.4.19 Updaterc-2
Asterisk ≫ Open Source Version1.4.19 Updaterc1
Asterisk ≫ Open Source Version1.4.19 Updaterc2
Asterisk ≫ Open Source Version1.4.19 Updaterc3
Asterisk ≫ Open Source Version1.4.19 Updaterc4
Asterisk ≫ Open Source Version1.4.19.1
Asterisk ≫ Open Source Version1.4.19.2
Asterisk ≫ Open Source Version1.4.20
Asterisk ≫ Open Source Version1.4.20 Updaterc1
Asterisk ≫ Open Source Version1.4.20 Updaterc2
Asterisk ≫ Open Source Version1.4.20 Updaterc3
Asterisk ≫ Open Source Version1.4.21
Asterisk ≫ Open Source Version1.4.21 Updaterc1
Asterisk ≫ Open Source Version1.4.21 Updaterc2
Asterisk ≫ Open Source Version1.4.21.1
Asterisk ≫ Open Source Version1.4.21.2
Asterisk ≫ Open Source Version1.4.22
Asterisk ≫ Open Source Version1.4.22 Updaterc3
Asterisk ≫ Open Source Version1.4.22 Updaterc4
Asterisk ≫ Open Source Version1.4.22.1
Asterisk ≫ Open Source Version1.4.22.2
Asterisk ≫ Open Source Version1.4.23
Asterisk ≫ Open Source Version1.4.23 Updaterc1
Asterisk ≫ Open Source Version1.4.23 Updaterc2
Asterisk ≫ Open Source Version1.4.23 Updaterc3
Asterisk ≫ Open Source Version1.4beta
Asterisk ≫ Open Source Version1.6.0 Updatebeta1
Asterisk ≫ Open Source Version1.6.0 Updatebeta2
Asterisk ≫ Open Source Version1.6.0 Updatebeta3
Asterisk ≫ Open Source Version1.6.0 Updatebeta4
Asterisk ≫ Open Source Version1.6.0 Updatebeta5
Asterisk ≫ Open Source Version1.6.0 Updatebeta7
Asterisk ≫ Open Source Version1.6.0 Updatebeta7.1
Asterisk ≫ Open Source Version1.6.0 Updatebeta8
Asterisk ≫ Open Source Version1.6.0 Updatebeta9
Asterisk ≫ Open Source Version1.6.0 Updaterc4
Asterisk ≫ Open Source Version1.6.0 Updaterc5
Asterisk ≫ Open Source Version1.6.0 Updaterc6
Asterisk ≫ Open Source Version1.6.0.1
Asterisk ≫ Open Source Version1.6.0.2
Asterisk ≫ Open Source Version1.6.0.3
Asterisk ≫ Open Source Version1.6.0.3 Updaterc1
Asterisk ≫ Open Source Version1.6.1.0 Updaterc1
Asterisk ≫ Open Source Version1.6.1.0 Updaterc2
Asterisk ≫ Open Source Version1.6.1.5
Asterisk ≫ Opensource Version1.4.23.2
Asterisk ≫ Opensource Version1.4.24
Asterisk ≫ Opensource Version1.4.24.1
Asterisk ≫ Opensource Version1.4.26
Asterisk ≫ Opensource Version1.4.26.1
Sangoma ≫ Asterisk Version1.6.1
Sangoma ≫ Asterisk Version1.6.1.4
Asterisk ≫ Appliance S800i Version1.3
Asterisk ≫ Appliance S800i Version1.3.0.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.84% 0.726
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 10 6.9
AV:N/AC:L/Au:N/C:N/I:N/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.