CVE-2008-5558
published 2008-12-17CVE-2008-5558: Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to…
PriorityP417medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
1.96%
77.8th percentile
Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| asterisk | asterisk_business_edition | — | — |
| asterisk | asterisk_business_edition | — | — |
| asterisk | asterisk_business_edition | — | — |
| asterisk | asterisk_business_edition | — | — |
| asterisk | asterisk_business_edition | — | — |
| asterisk | asterisk_business_edition | >= 0 < 1:1.4.0~dfsg-1 | 1:1.4.0~dfsg-1 |
| asterisk | open_source | — | — |
| asterisk | open_source | — | — |
| asterisk | open_source | — | — |
| asterisk | open_source | — | — |
| asterisk | open_source | — | — |
| asterisk | open_source | — | — |
| asterisk | open_source | — | — |
| asterisk | open_source | — | — |
| asterisk | open_source | — | — |
| debian | asterisk | < asterisk 1:1.4.0~dfsg-1 (bullseye) | asterisk 1:1.4.0~dfsg-1 (bullseye) |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-rvg3-83c6-fx75: Asterisk Open Source 1
ghsa_unreviewed·2022-05-14
CVE-2008-5558 [MEDIUM] CWE-287 GHSA-rvg3-83c6-fx75: Asterisk Open Source 1
Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.
OSV
CVE-2008-5558: Asterisk Open Source 1
osv·2008-12-17·CVSS 4.3
CVE-2008-5558 [MEDIUM] CVE-2008-5558: Asterisk Open Source 1
Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.
Debian
CVE-2008-5558: asterisk - Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 throug...
vendor_debian·2008·CVSS 4.3
CVE-2008-5558 [MEDIUM] CVE-2008-5558: asterisk - Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 throug...
Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.
Scope: local
bullseye: resolved (fixed in 1:1.4.0~dfsg-1)
sid: resolved (fixed in 1:1.4.0~dfsg-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://downloads.digium.com/pub/security/AST-2008-012.htmlhttp://osvdb.org/50675http://secunia.com/advisories/32956http://secunia.com/advisories/34982http://security.gentoo.org/glsa/glsa-200905-01.xmlhttp://securityreason.com/securityalert/4769http://www.securityfocus.com/archive/1/499117/100/0/threadedhttp://www.securityfocus.com/bid/32773http://www.securitytracker.com/id?1021378http://www.vupen.com/english/advisories/2008/3403http://downloads.digium.com/pub/security/AST-2008-012.htmlhttp://osvdb.org/50675http://secunia.com/advisories/32956http://secunia.com/advisories/34982http://security.gentoo.org/glsa/glsa-200905-01.xmlhttp://securityreason.com/securityalert/4769http://www.securityfocus.com/archive/1/499117/100/0/threadedhttp://www.securityfocus.com/bid/32773http://www.securitytracker.com/id?1021378http://www.vupen.com/english/advisories/2008/3403
2008-12-17
Published