« Volver al listado

CVE-2008-2543

Estado: ModificadaMedia (5)—

The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Asterisk — Asterisk-addons

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-2543",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-06-05T20:32:00.000",
  "references": [
    {
      "url": "http://downloads.digium.com/pub/security/AST-2008-009.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/30555",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securitytracker.com/id?1020202",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/493122/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/493144/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/29567",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/1747/references",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42869",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://downloads.digium.com/pub/security/AST-2008-009.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/30555",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1020202",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/493122/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/493144/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/29567",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/1747/references",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42869",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-399"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets."
    },
    {
      "lang": "es",
      "value": "El controlador de canal ooh323 channel en Asterisk Addons 1.2.x anteriores a 1.2.9 y Asterisk-Addons 1.4.x anteriores a 1.4.7 crea un puerto TCP accesible remotamente previsto únicamente para comunicaciones localhost, e interpreta algunos campos application-data como direcciones de memoria para liberar, lo que permite a atacantes remotos provocar una denegación de servicio (caída de demonio) mediante paquetes TCP manipulados."
    }
  ],
  "lastModified": "2026-06-16T22:53:57.957",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "350F5808-0521-4028-A72D-43089F7994FD"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B616443-8A71-46DB-A466-DC033FFAB89F"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C2593E04-D237-4A55-BD51-BE3232AECD84"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D73F78F-24FB-4B12-AAD2-BA94F2005375"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FACD9D9F-A515-409F-A015-3CB04DB7166E"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.2.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2201F683-8215-45A9-82D6-8A3A9170A09B"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.2.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3BD6C363-CEE3-4171-BF9D-C8B5B8FFED36"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8062FED1-6D52-4DE1-9925-F5BF71606237"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.2.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD025C66-9050-450B-9503-23DE880D7E5D"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CA3DEBB6-4A23-40AC-8BC6-19D8948635D6"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "61F8B87D-D5F0-4C95-8F5F-4EB5902780C0"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.4.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDD9442B-1DFB-4ACF-AA6E-8D523744B359"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.4.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D867E549-1D20-4986-862C-44BCA35227FD"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.4.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E8B7DC4E-39B7-40C1-B051-ECA1E09BB22D"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "75295192-AE60-4342-A058-43EBFDB2BADC"
            },
            {
              "criteria": "cpe:2.3:a:asterisk:asterisk-addons:1.4.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "14797CEA-CC0E-4BC8-A6A1-B34C54CF6BA5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}