Evil-DB LogoEvil-DB
← All CVEs

CVE-2008-3263

high · 7.8

The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (call-number exhaustion and CPU consumption) by quickly sending a large number of IAX2 (IAX) POKE requests.

7.8
CVSS
28.0%
EPSS (exploit prob.)
98th
EPSS percentile
2008-07-22
Published

AV:N/AC:L/Au:N/C:N/I:N/A:C

Weaknesses

CWE-399

Affected products

VendorProductAffected versions
asteriskasterisk0.1.0
asteriskasterisk0.1.1
asteriskasterisk0.1.2
asteriskasterisk0.1.3
asteriskasterisk0.1.4
asteriskasterisk0.1.5
asteriskasterisk0.1.6
asteriskasterisk0.1.7
asteriskasterisk0.1.8
asteriskasterisk0.1.9
asteriskasterisk0.1.9_1
asteriskasterisk0.1.10
asteriskasterisk0.1.11
asteriskasterisk0.1.12
asteriskasterisk0.2
asteriskasterisk0.3
asteriskasterisk0.4
asteriskasterisk0.5.0
asteriskasterisk0.7.0
asteriskasterisk0.7.1
asteriskasterisk0.7.2
asteriskasterisk0.9.0
asteriskasterisk1.0
asteriskasterisk1.0
asteriskasterisk1.0.1
asteriskasterisk1.0.2
asteriskasterisk1.0.3
asteriskasterisk1.0.4
asteriskasterisk1.0.5
asteriskasterisk1.0.6
asteriskasterisk1.0.7
asteriskasterisk1.0.8
asteriskasterisk1.0.9
asteriskasterisk1.0.10
asteriskasterisk1.0.11
asteriskasterisk1.0.11.1
asteriskasterisk1.0.12
asteriskasterisk1.2.0_beta1
asteriskasterisk1.2.0_beta2
asteriskasterisk1.2.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2008-3263