CVE-2008-0095: Null Pointer Dereference
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0095?
CVE-2008-0095 has a high severity level as it allows remote attackers to cause a denial of service by crashing the Asterisk daemon.
How do I fix CVE-2008-0095?
To fix CVE-2008-0095, upgrade to Asterisk versions 1.4.17 or later, Business Edition C.1.0-beta8 or later, or the respective versions for AsteriskNOW and the Appliance Developer Kit.
Which software versions are affected by CVE-2008-0095?
CVE-2008-0095 affects Asterisk Open Source versions below 1.4.17, Business Edition versions before C.1.0-beta8, and several other related software versions.
What type of vulnerability is CVE-2008-0095?
CVE-2008-0095 is a remote denial of service vulnerability that can result in the crashing of the Asterisk daemon.
Can CVE-2008-0095 be exploited remotely?
Yes, CVE-2008-0095 can be exploited remotely, allowing attackers to disrupt services.