CVE-2008-2119

Published Jun 4, 2008 CVSS 2.0 · 4.3 Medium EPSS 7.3% KEV · Not listed
Description
Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 8:49 AM
Reserved
May 8, 2008, 12:00 AM
Status
Modified
Published
Jun 4, 2008, 7:32 PM
Modified
Jun 16, 2026, 10:53 PM