asterisk: Two buffer overflows in RTP Codec Payload Handling (AST-2008-002)
Published Mar 24, 2008
7.5
HIGHCVSS 2.0
EPSS 11.52%
Description
Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a zero to an arbitrary memory location via a large RTP payload number, related to the ast_rtp_unset_m_type function in main/rtp.c; or (2) write certain integers to an arbitrary memory location via a large number of RTP payloads, related to the process_sdp function in channels/chan_sip.c.
Affected products
No data.
- 1.4
- ≤ c.1.0-beta8
- ≤ c.1.0beta7
- ≤ 1.0.1
- ≤ 1.4.18
- ≤ 1.4.19
- ≤ 1.6.0_beta5
- ≤ 1.1.0.1
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Metrics
No CVSS v4.0 score for this CVE.
No CVSS v3.1 score for this CVE.
No CVSS v3.0 score for this CVE.
AV:N/AC:L/Au:N/C:P/I:P/A:P
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2022–2026- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Percentile over time
- EPSS v2
- EPSS v3
- EPSS v4
- EPSS v5
Table of values (21 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 11.52% (0.11523) | 95.90th | v5 (v2026.06.15) |
| Jun 15, 2026 | 11.52% (0.11523) | 95.46th | v5 (v2026.06.15) |
| Jan 11, 2026 | 24.95% (0.24953) | 95.98th | v4 (v2025.03.14) |
| Oct 6, 2025 | 28.37% (0.28365) | 96.34th | v4 (v2025.03.14) |
| Aug 18, 2025 | 31.01% (0.31008) | 96.57th | v4 (v2025.03.14) |
| May 28, 2025 | 26.63% (0.26630) | 96.04th | v4 (v2025.03.14) |
| May 14, 2025 | 22.33% (0.22327) | 95.47th | v4 (v2025.03.14) |
| Mar 30, 2025 | 20.85% (0.20853) | 95.13th | v4 (v2025.03.14) |
| Mar 29, 2025 | 17.34% (0.17337) | 91.80th | v4 (v2025.03.14) |
| Mar 17, 2025 | 20.85% (0.20853) | 95.15th | v4 (v2025.03.14) |
| Jan 26, 2025 | 94.00% (0.94004) | 99.38th | v3 (v2023.03.01) |
| Dec 17, 2024 | 95.65% (0.95653) | 99.57th | v3 (v2023.03.01) |
| Dec 12, 2024 | 96.97% (0.96972) | 99.79th | v3 (v2023.03.01) |
| Nov 8, 2023 | 96.98% (0.96981) | 99.66th | v3 (v2023.03.01) |
| Oct 3, 2023 | 97.00% (0.97001) | 99.65th | v3 (v2023.03.01) |
| Jun 18, 2023 | 97.02% (0.97017) | 99.60th | v3 (v2023.03.01) |
| Apr 7, 2023 | 96.96% (0.96963) | 99.53th | v3 (v2023.03.01) |
| Mar 7, 2023 | 97.03% (0.97031) | 99.54th | v3 (v2023.03.01) |
| Mar 6, 2023 | 12.57% (0.12567) | 95.52th | v2 (v2022.01.01) |
| Apr 1, 2022 | 12.57% (0.12567) | 95.18th | v2 (v2022.01.01) |
| Feb 4, 2022 | 12.57% (0.12567) | 90.03th | v2 (v2022.01.01) |
References (18)
- http://downloads.digium.com/pub/security/AST-2008-002.html x_refsource_CONFIRM
- http://labs.musecurity.com/advisories/MU-200803-01.txt x_refsource_MISCExploit
- http://secunia.com/advisories/29426 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/29470 third-party-advisoryx_refsource_SECUNIA
- http://securityreason.com/securityalert/3763 third-party-advisoryx_refsource_SREASON
- http://securitytracker.com/id?1019628 vdb-entryx_refsource_SECTRACK
- http://www.asterisk.org/node/48466 x_refsource_CONFIRM
- http://www.securityfocus.com/archive/1/489817/100/0/threaded mailing-listx_refsource_BUGTRAQ
- http://www.securityfocus.com/bid/28308 vdb-entryx_refsource_BIDExploit
- http://www.vupen.com/english/advisories/2008/0928 vdb-entryx_refsource_VUPEN
- https://access.redhat.com/security/cve/CVE-2008-1289 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=438127 Issue Tracking
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41302 vdb-entryx_refsource_XF
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41305 vdb-entryx_refsource_XF
- https://nvd.nist.gov/vuln/detail/CVE-2008-1289
- https://www.cve.org/CVERecord?id=CVE-2008-1289
- https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00438.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2008-March/msg00514.html vendor-advisoryx_refsource_FEDORA
Change history (0)
No recorded changes yet.