CVE-2008-2543: Medium severity asterisk vulnerability
The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication, and interprets some TCP application-data fields as addresses of memory to free, which allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2543?
CVE-2008-2543 is considered a high severity vulnerability due to the potential for remote exploitation of the affected Asterisk Addons versions.
How can I fix CVE-2008-2543?
To fix CVE-2008-2543, upgrade to Asterisk Addons version 1.2.9 or later, or 1.4.7 or later.
What versions are affected by CVE-2008-2543?
CVE-2008-2543 affects Asterisk Addons versions 1.2.0 through 1.2.8 and versions 1.4.0 through 1.4.6.
What exploitation method is used in CVE-2008-2543?
CVE-2008-2543 allows attackers to exploit a remotely accessible TCP port by interpreting TCP application-data fields inappropriately.
What is the impact of CVE-2008-2543?
The impact of CVE-2008-2543 includes the potential for remote attackers to execute arbitrary code or cause denial of service.