Asterisk Appliance Developer Kit
Approved changes feed: RSS · Atom
cpe:2.3:a:asterisk:asterisk_appliance_developer_kit:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Asterisk (8cf0208b-fb97-57c9-94a0-6da40e548dcd) |
|---|---|
| Product | Asterisk Appliance Developer Kit (5866186e-5909-5fab-9e57-149baabe4477) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-1923 |
vulnerable | 2026-06-03 14:28:42.600799 |
Details available
The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message.
Published: 2008-04-23T16:00:00.000Z
Updated: 2024-08-07T08:41:00.169Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1332 |
vulnerable | 2026-06-03 14:28:40.178361 |
Details available
Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header.
Published: 2008-03-20T00:00:00.000Z
Updated: 2024-08-07T08:17:34.472Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-0095 |
vulnerable | 2026-06-03 14:28:31.140181 |
Details available
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference.
Published: 2008-01-08T02:00:00.000Z
Updated: 2024-08-07T07:32:23.897Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4455 |
vulnerable | 2026-06-03 14:28:18.485253 |
Details available
The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote attackers to cause a denial of service (memory exhaustion) via a SIP dialog that causes a large number of history entries to be created.
Published: 2007-08-22T01:00:00.000Z
Updated: 2024-08-07T14:53:55.958Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4280 |
vulnerable | 2026-06-03 14:28:18.164112 |
Details available
The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities count larger than the capabilities_res_message array population.
Published: 2007-08-09T21:00:00.000Z
Updated: 2024-08-07T14:46:39.690Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3765 |
vulnerable | 2026-06-03 14:28:16.977070 |
Details available
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted STUN length attribute in a STUN packet sent on an RTP port.
Published: 2007-07-18T17:00:00.000Z
Updated: 2024-08-07T14:28:52.295Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3764 |
vulnerable | 2026-06-03 14:28:16.975981 |
Details available
The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a certain data length value in a crafted packet, which results in an "overly large memcpy."
Published: 2007-07-18T17:00:00.000Z
Updated: 2024-08-07T14:28:52.239Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3763 |
vulnerable | 2026-06-03 14:28:16.974606 |
Details available
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted (1) LAGRQ or (2) LAGRP frame that contains information elements of IAX frames, which results in a NULL pointer dereference when Asterisk does not properly set an associated variable.
Published: 2007-07-18T17:00:00.000Z
Updated: 2024-08-07T14:28:52.493Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3762 |
vulnerable | 2026-06-03 14:28:16.970408 |
Details available
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or (2) video RTP frame.
Published: 2007-07-18T17:00:00.000Z
Updated: 2024-08-07T14:28:52.292Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.