Approved changes feed: RSS · Atom

cpe:2.3:a:asterisk:asterisk_business_edition:b2.5.1:*:*:*:*:*:*:*

part: a version: b2.5.1 update: *

VendorAsterisk (8cf0208b-fb97-57c9-94a0-6da40e548dcd)
ProductAsterisk Business Edition (51a12edd-5496-597f-8b86-bea9035b3525)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3264 vulnerable 2026-06-03 14:28:52.900383 Details available
The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (traffic amplification) via an IAX2 FWDOWNL request.
Published: 2008-07-24T15:18:00.000Z
Updated: 2024-08-07T09:28:41.869Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2119 vulnerable 2026-06-03 14:28:43.361936 Details available
Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.
Published: 2008-06-04T19:17:00.000Z
Updated: 2024-08-07T08:49:58.663Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.