CVE-2009-2346: Buffer Overflow

First published: Tue Sep 08 2009(Updated: )

The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263.

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
Asterisk Opensource	=1.4.26.1
Asterisk Open Source	=1.4.22
Asterisk Open Source	=1.4.23-rc1
Asterisk Open Source	=1.2.4-netsec
Asterisk Open Source	=1.2.8
Asterisk Asterisk	=c.1.0_beta7
Asterisk Open Source	=1.2.16-netsec
Asterisk Asterisk	=b.2.5.9
Asterisk Open Source	=1.6.0-rc4
Asterisk Asterisk	=b.2.5.8
Asterisk Open Source	=1.2.14
Asterisk Opensource	=1.4.23.2
Asterisk Open Source	=1.6.0-beta7
Asterisk Open Source	=1.2.30.2
Asterisk Open Source	=1.4.19.1
Asterisk Opensource	=1.4.24.1
Asterisk Open Source	=1.4.19-rc2
Asterisk Open Source	=1.2.20-netsec
Asterisk Open Source	=1.6.0-rc5
Asterisk Open Source	=1.4.23-rc2
Asterisk Open Source	=1.2.12-netsec
Asterisk Open Source	=1.2.19-netsec
Asterisk Asterisk	=c.2.1.2.1
Asterisk Open Source	=1.2.15
Asterisk Open Source	=1.2.9.1-netsec
Asterisk Open Source	=1.2.27
Asterisk Open Source	=1.4.9
Asterisk Open Source	=1.4.20-rc2
Asterisk Open Source	=1.4.10
Asterisk Open Source	=1.4.6
Asterisk Open Source	=1.2.14-netsec
Asterisk Open Source	=1.2.3
Asterisk Asterisk	=c.1.10.4
Asterisk Open Source	=1.2.23
Asterisk Open Source	=1.2.0-beta2
Asterisk Asterisk	=b.2.2.1
Asterisk Open Source	=1.6.0-beta5
Asterisk Open Source	=1.2.26.2-netsec
Asterisk Open Source	=1.4.0
Asterisk Open Source	=1.6.1.5
Asterisk Open Source	=1.4.20
Asterisk Open Source	=1.2.26.1
Asterisk Open Source	=1.4.15
Asterisk Open Source	=1.6.1
Asterisk Open Source	=1.4beta
Asterisk Appliance s800i	=1.3
Asterisk Open Source	=1.4.21.1
Asterisk Asterisk	=b.1.3.3
Asterisk Open Source	=1.2.13-netsec
Asterisk Open Source	=1.4.21-rc2
Asterisk Open Source	=1.2.32
Asterisk Open Source	=1.6.0.1
Asterisk Open Source	=1.2.25-netsec
Asterisk Open Source	=1.2.0-rc2
Asterisk Open Source	=1.2.1
Asterisk Open Source	=1.2.26-netsec
Asterisk Open Source	=1.6.0-beta7.1
Asterisk Open Source	=1.4.19-rc3
Asterisk Open Source	=1.6.0-rc6
Asterisk Open Source	=1.2.24
Asterisk Asterisk	=c.1.0_beta8
Asterisk Open Source	=1.6.0-beta1
Asterisk Asterisk	=c.2.3
Asterisk Open Source	=1.4.12.1
Asterisk Open Source	=1.4.12
Asterisk Open Source	=1.4.19-rc4
Asterisk Asterisk	=c.1.6.2
Asterisk Open Source	=1.2.9.1
Asterisk Open Source	=1.2.30.4
Asterisk Asterisk	=b.2.5.4
Asterisk Open Source	=1.4.16.2
Asterisk Open Source	=1.2.33
Asterisk Asterisk	=b.2.3.6
Asterisk Open Source	=1.4.13
Asterisk Open Source	=1.2.0
Asterisk Open Source	=1.2.25
Asterisk Open Source	=1.2.3-netsec
Asterisk Open Source	=1.2.18-netsec
Asterisk Open Source	=1.2.10-netsec
Asterisk Asterisk	=b.2.5.1
Asterisk Open Source	=1.2.11
Asterisk Open Source	=1.4.10.1
Asterisk Open Source	=1.2.12
Asterisk Asterisk	=b.2.5.5
Asterisk Open Source	=1.4.18.1
Asterisk Open Source	=1.2.7.1-netsec
Asterisk Asterisk	=b.2.2.0
Asterisk Asterisk	=b.2.3.4
Asterisk Open Source	=1.2.13
Asterisk Open Source	=1.4.2
Asterisk Open Source	=1.2.2
Asterisk Open Source	=1.2.6-netsec
Asterisk Open Source	=1.4.1
Asterisk Open Source	=1.2.5
Asterisk Open Source	=1.6.0.3-rc1
Asterisk Open Source	=1.6.0-beta3
Asterisk Open Source	=1.6.0-beta2
Asterisk Open Source	=1.2.26
Asterisk Open Source	=1.4.0-beta4
Asterisk Open Source	=1.2.24-netsec
Asterisk Open Source	=1.4.20-rc3
Asterisk Open Source	=1.4.11
Asterisk Open Source	=1.2.21
Asterisk Open Source	=1.4.3
Asterisk Asterisk	=b.2.3.3
Asterisk Open Source	=1.2.21-netsec
Asterisk Open Source	=1.2.34
Asterisk Open Source	=1.4.7
Asterisk Asterisk	=c.2.4.2
Asterisk Open Source	=1.2.0-rc1
Asterisk Open Source	=1.6.0-beta8
Asterisk Open Source	=1.4.19-rc-2
Asterisk Opensource	=1.4.24
Asterisk Open Source	=1.4.22-rc3
Asterisk Open Source	=1.2.11-netsec
Asterisk Open Source	=1.4.4
Asterisk Open Source	=1.4.7.1
Asterisk Open Source	=1.2.26.2
Asterisk Open Source	=1.4.0-beta2
Asterisk Asterisk	=c.3.1.0
Asterisk Open Source	=1.2.7
Asterisk Open Source	=1.4.22.2
Asterisk Open Source	=1.2.10
Asterisk Open Source	=1.2.17
Asterisk Asterisk	=b.2.3.1
Asterisk Open Source	=1.6.1.0-rc1
Asterisk Open Source	=1.4.5
Asterisk Open Source	=1.4.23
Asterisk Open Source	=1.2.7.1
Asterisk Open Source	=1.2.7-netsec
Asterisk Opensource	=1.4.26
Asterisk Open Source	=1.2.30
Asterisk Asterisk	=b.2.5.3
Asterisk Open Source	=1.2.17-netsec
Asterisk Open Source	=1.2.20
Asterisk Open Source	=1.2.4
Asterisk Open Source	=1.4.0-beta3
Asterisk Open Source	=1.4.22.1
Asterisk Open Source	=1.4.18
Asterisk Open Source	=1.2.15-netsec
Asterisk Open Source	=1.2.22
Asterisk Asterisk	=c.2.3.3
Asterisk Open Source	=1.4.19.2
Asterisk Open Source	=1.6.0-beta9
Asterisk Open Source	=1.2.5-netsec
Asterisk Open Source	=1.2.30.3
Asterisk Open Source	=1.2.2-netsec
Asterisk Open Source	=1.4.16
Asterisk Open Source	=1.6.1.0-rc2
Asterisk Open Source	=1.6.0.3
Asterisk Asterisk	=b.1.3.2
Asterisk Open Source	=1.4.14
Asterisk Open Source	=1.2.0-beta1
Asterisk Asterisk	=c.1.10.3
Asterisk Asterisk	=c.1.6.1
Asterisk Open Source	=1.2.16
Asterisk Open Source	=1.6.0-beta4
Asterisk Asterisk	=b.2.3.5
Asterisk Open Source	=1.2.12.1
Asterisk Open Source	=1.6.0.2
Asterisk Open Source	=1.4.23-rc3
Asterisk Open Source	=1.2.9
Asterisk Open Source	=1.4.16.1
Asterisk Open Source	=1.4.21-rc1
Asterisk Open Source	=1.4.21
Asterisk Open Source	=1.2.21.1
Asterisk Open Source	=1.2.8-netsec
Asterisk Open Source	=1.2.26.1-netsec
Asterisk Open Source	=1.4.21.2
Asterisk Open Source	=1.2.19
Asterisk Open Source	=1.6.1.4
Asterisk Open Source	=1.4.19-rc1
Asterisk Open Source	=1.4.20-rc1
Asterisk Open Source	=1.2.12.1-netsec
Asterisk Open Source	=1.2.28
Asterisk Asterisk	=b.2.3.2
Asterisk Asterisk	=c.1.6
Asterisk Open Source	=1.4.19
Asterisk Open Source	=1.2.31
Asterisk Open Source	=1.2.21.1-netsec
Asterisk Asterisk	=c.1.10.5
Asterisk Open Source	=1.4.8
Asterisk Open Source	=1.4.17
Asterisk Asterisk	=b.2.5.6
Asterisk Open Source	=1.2.6
Asterisk Open Source	=1.4.22-rc4
Asterisk Open Source	=1.2.18
Asterisk Asterisk	=c.1.8.1
Asterisk Open Source	=1.2.22-netsec
Asterisk Open Source	=1.2.23-netsec
Asterisk Appliance s800i	=1.3.0.2
Asterisk Open Source	=1.2.29
Sangoma Asterisk	=1.6.1
Sangoma Asterisk	=1.6.1.4

Never miss a vulnerability like this again

Reference Links

collector/nvd-historical
collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/references
agent/severity
agent/weakness
agent/tags
agent/description
agent/first-publish-date
agent/event
collector/nvd-api
source/NVD
agent/software-canonical-lookup
vendor/asterisk
canonical/asterisk opensource
version/asterisk opensource/1.4.26.1
canonical/asterisk open source
version/asterisk open source/1.4.22
version/asterisk open source/1.4.23-rc1
version/asterisk open source/1.2.4-netsec
version/asterisk open source/1.2.8
canonical/asterisk asterisk
version/asterisk asterisk/c.1.0_beta7
version/asterisk open source/1.2.16-netsec
version/asterisk asterisk/b.2.5.9
version/asterisk open source/1.6.0-rc4
version/asterisk asterisk/b.2.5.8
version/asterisk open source/1.2.14
version/asterisk opensource/1.4.23.2
version/asterisk open source/1.6.0-beta7
version/asterisk open source/1.2.30.2
version/asterisk open source/1.4.19.1
version/asterisk opensource/1.4.24.1
version/asterisk open source/1.4.19-rc2
version/asterisk open source/1.2.20-netsec
version/asterisk open source/1.6.0-rc5
version/asterisk open source/1.4.23-rc2
version/asterisk open source/1.2.12-netsec
version/asterisk open source/1.2.19-netsec
version/asterisk asterisk/c.2.1.2.1
version/asterisk open source/1.2.15
version/asterisk open source/1.2.9.1-netsec
version/asterisk open source/1.2.27
version/asterisk open source/1.4.9
version/asterisk open source/1.4.20-rc2
version/asterisk open source/1.4.10
version/asterisk open source/1.4.6
version/asterisk open source/1.2.14-netsec
version/asterisk open source/1.2.3
version/asterisk asterisk/c.1.10.4
version/asterisk open source/1.2.23
version/asterisk open source/1.2.0-beta2
version/asterisk asterisk/b.2.2.1
version/asterisk open source/1.6.0-beta5
version/asterisk open source/1.2.26.2-netsec
version/asterisk open source/1.4.0
version/asterisk open source/1.6.1.5
version/asterisk open source/1.4.20
version/asterisk open source/1.2.26.1
version/asterisk open source/1.4.15
version/asterisk open source/1.6.1
version/asterisk open source/1.4beta
canonical/asterisk appliance s800i
version/asterisk appliance s800i/1.3
version/asterisk open source/1.4.21.1
version/asterisk asterisk/b.1.3.3
version/asterisk open source/1.2.13-netsec
version/asterisk open source/1.4.21-rc2
version/asterisk open source/1.2.32
version/asterisk open source/1.6.0.1
version/asterisk open source/1.2.25-netsec
version/asterisk open source/1.2.0-rc2
version/asterisk open source/1.2.1
version/asterisk open source/1.2.26-netsec
version/asterisk open source/1.6.0-beta7.1
version/asterisk open source/1.4.19-rc3
version/asterisk open source/1.6.0-rc6
version/asterisk open source/1.2.24
version/asterisk asterisk/c.1.0_beta8
version/asterisk open source/1.6.0-beta1
version/asterisk asterisk/c.2.3
version/asterisk open source/1.4.12.1
version/asterisk open source/1.4.12
version/asterisk open source/1.4.19-rc4
version/asterisk asterisk/c.1.6.2
version/asterisk open source/1.2.9.1
version/asterisk open source/1.2.30.4
version/asterisk asterisk/b.2.5.4
version/asterisk open source/1.4.16.2
version/asterisk open source/1.2.33
version/asterisk asterisk/b.2.3.6
version/asterisk open source/1.4.13
version/asterisk open source/1.2.0
version/asterisk open source/1.2.25
version/asterisk open source/1.2.3-netsec
version/asterisk open source/1.2.18-netsec
version/asterisk open source/1.2.10-netsec
version/asterisk asterisk/b.2.5.1
version/asterisk open source/1.2.11
version/asterisk open source/1.4.10.1
version/asterisk open source/1.2.12
version/asterisk asterisk/b.2.5.5
version/asterisk open source/1.4.18.1
version/asterisk open source/1.2.7.1-netsec
version/asterisk asterisk/b.2.2.0
version/asterisk asterisk/b.2.3.4
version/asterisk open source/1.2.13
version/asterisk open source/1.4.2
version/asterisk open source/1.2.2
version/asterisk open source/1.2.6-netsec
version/asterisk open source/1.4.1
version/asterisk open source/1.2.5
version/asterisk open source/1.6.0.3-rc1
version/asterisk open source/1.6.0-beta3
version/asterisk open source/1.6.0-beta2
version/asterisk open source/1.2.26
version/asterisk open source/1.4.0-beta4
version/asterisk open source/1.2.24-netsec
version/asterisk open source/1.4.20-rc3
version/asterisk open source/1.4.11
version/asterisk open source/1.2.21
version/asterisk open source/1.4.3
version/asterisk asterisk/b.2.3.3
version/asterisk open source/1.2.21-netsec
version/asterisk open source/1.2.34
version/asterisk open source/1.4.7
version/asterisk asterisk/c.2.4.2
version/asterisk open source/1.2.0-rc1
version/asterisk open source/1.6.0-beta8
version/asterisk open source/1.4.19-rc-2
version/asterisk opensource/1.4.24
version/asterisk open source/1.4.22-rc3
version/asterisk open source/1.2.11-netsec
version/asterisk open source/1.4.4
version/asterisk open source/1.4.7.1
version/asterisk open source/1.2.26.2
version/asterisk open source/1.4.0-beta2
version/asterisk asterisk/c.3.1.0
version/asterisk open source/1.2.7
version/asterisk open source/1.4.22.2
version/asterisk open source/1.2.10
version/asterisk open source/1.2.17
version/asterisk asterisk/b.2.3.1
version/asterisk open source/1.6.1.0-rc1
version/asterisk open source/1.4.5
version/asterisk open source/1.4.23
version/asterisk open source/1.2.7.1
version/asterisk open source/1.2.7-netsec
version/asterisk opensource/1.4.26
version/asterisk open source/1.2.30
version/asterisk asterisk/b.2.5.3
version/asterisk open source/1.2.17-netsec
version/asterisk open source/1.2.20
version/asterisk open source/1.2.4
version/asterisk open source/1.4.0-beta3
version/asterisk open source/1.4.22.1
version/asterisk open source/1.4.18
version/asterisk open source/1.2.15-netsec
version/asterisk open source/1.2.22
version/asterisk asterisk/c.2.3.3
version/asterisk open source/1.4.19.2
version/asterisk open source/1.6.0-beta9
version/asterisk open source/1.2.5-netsec
version/asterisk open source/1.2.30.3
version/asterisk open source/1.2.2-netsec
version/asterisk open source/1.4.16
version/asterisk open source/1.6.1.0-rc2
version/asterisk open source/1.6.0.3
version/asterisk asterisk/b.1.3.2
version/asterisk open source/1.4.14
version/asterisk open source/1.2.0-beta1
version/asterisk asterisk/c.1.10.3
version/asterisk asterisk/c.1.6.1
version/asterisk open source/1.2.16
version/asterisk open source/1.6.0-beta4
version/asterisk asterisk/b.2.3.5
version/asterisk open source/1.2.12.1
version/asterisk open source/1.6.0.2
version/asterisk open source/1.4.23-rc3
version/asterisk open source/1.2.9
version/asterisk open source/1.4.16.1
version/asterisk open source/1.4.21-rc1
version/asterisk open source/1.4.21
version/asterisk open source/1.2.21.1
version/asterisk open source/1.2.8-netsec
version/asterisk open source/1.2.26.1-netsec
version/asterisk open source/1.4.21.2
version/asterisk open source/1.2.19
version/asterisk open source/1.6.1.4
version/asterisk open source/1.4.19-rc1
version/asterisk open source/1.4.20-rc1
version/asterisk open source/1.2.12.1-netsec
version/asterisk open source/1.2.28
version/asterisk asterisk/b.2.3.2
version/asterisk asterisk/c.1.6
version/asterisk open source/1.4.19
version/asterisk open source/1.2.31
version/asterisk open source/1.2.21.1-netsec
version/asterisk asterisk/c.1.10.5
version/asterisk open source/1.4.8
version/asterisk open source/1.4.17
version/asterisk asterisk/b.2.5.6
version/asterisk open source/1.2.6
version/asterisk open source/1.4.22-rc4
version/asterisk open source/1.2.18
version/asterisk asterisk/c.1.8.1
version/asterisk open source/1.2.22-netsec
version/asterisk open source/1.2.23-netsec
version/asterisk appliance s800i/1.3.0.2
version/asterisk open source/1.2.29
vendor/sangoma
canonical/sangoma asterisk
version/sangoma asterisk/1.6.1
version/sangoma asterisk/1.6.1.4

CVE-2009-2346: Buffer Overflow

Never miss a vulnerability like this again

Reference Links

Company

Resources

Contact