Vulnerability Intelligence Report
CVE-2008-1923
The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message.
No Active Exploit Signals
CVSS Base Score
7.1
HIGH
EPSS Probability:1.40%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| asterisk | asterisk_appliance_developer_kit | all |
| asterisk | asterisk_business_edition | a, b.1.3.2, b.1.3.3, b.2.2.0, b.2.2.1, b.2.3.1, b.2.3.2, b.2.3.3, b.2.3.4, b.2.5.0, c.1.0-beta7, c.1.0-beta8, c.1.0beta7, c.1.6.1 |
| asterisk | asterisknow | 1.0, 1.0.1 |
| asterisk | open_source | 1.0, 1.0.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.11, 1.0.11.1, 1.0.12, 1.2.0, 1.2.1, 1.2.2, 1.2.3, 1.2.4, 1.2.5, 1.2.6, 1.2.7, 1.2.7.1, 1.2.8, 1.2.9, 1.2.9.1, 1.2.10, 1.2.11, 1.2.12, 1.2.12.1, 1.2.13, 1.2.14, 1.2.15, 1.2.16, 1.2.17, 1.2.18, 1.2.19, 1.2.20, 1.2.21, 1.2.21.1, 1.2.22, 1.2.23, 1.2.24, 1.2.25, 1.2.26, 1.2.26.1, 1.2.26.2, 1.2.27, 1.2.28, 1.4.0, 1.4.1, 1.4.2, 1.4.3, 1.4.4, 1.4.5, 1.4.6, 1.4.7, 1.4.7.1, 1.4.8, 1.4.9, 1.4.10, 1.4.10.1, 1.4.11, 1.4.12, 1.4.12.1, 1.4.13, 1.4.14, 1.4.15, 1.4.16, 1.4.16.1, 1.4.16.2, 1.4.17, 1.4.18, 1.4.18.1, 1.4.19 |
| asterisk | s800i | 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.3.3, 1.1.0, 1.1.0.1 |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.400%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2008-04-23T00:00:00 |
| Published | 2008-04-23T16:00:00 |
| Patch Date | 2008-04-22 |
| Last Updated | 2024-08-07T08:41:00 |
Community Chatter & Buzz