DEBIAN-CVE-2008-1897
- Source
- https://security-tracker.debian.org/tracker/CVE-2008-1897
- Import Source
- https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2008-1897.json
- JSON Data
- https://api.osv.dev/v1/vulns/DEBIAN-CVE-2008-1897
- Upstream
- Downstream
- Published
- 2008-04-23T16:05:00Z
- Modified
- 2026-09-01T20:02:53Z
- Summary
- [none]
- Details
-
The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls, does not verify that an ACK response contains a call number matching the server's reply to a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed ACK response that does not complete a 3-way handshake. NOTE: this issue exists because of an incomplete fix for CVE-2008-1923.
- References
Affected packages
Debian:14 / asterisk
Package
- Name
- asterisk
- Purl
- pkg:deb/debian/asterisk?arch=source&distro=forky
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed1:1.4.19.1~dfsg-1
Affected versions
0.*
0.1.11-3
0.1.11-3woody1
1:1.*
1:1.0.5-2
1:1.0.5-4
1:1.0.6-1
1:1.0.6-2
1:1.0.7-1
1:1.0.7.dfsg.1-1
1:1.0.7.dfsg.1-2
1:1.0.7.dfsg.1-2sarge1
1:1.0.7.dfsg.1-2sarge2
1:1.0.7.dfsg.1-2sarge3
1:1.0.7.dfsg.1-2sarge4
1:1.0.7.dfsg.1-2sarge5
1:1.0.7.dfsg.1-2sarge6
1:1.0.9.dfsg-1
1:1.0.9.dfsg-3
1:1.0.9.dfsg-4
1:1.0.9.dfsg-5
1:1.0.9.dfsg-6
1:1.2.0-beta1.dfsg-1
1:1.2.0-beta2.dfsg-1
1:1.2.0-beta2.dfsg-2
1:1.2.0-beta2.dfsg-3
1:1.2.0-rc1.dfsg-1
1:1.2.0-rc2.dfsg-1
1:1.2.0.dfsg-1
1:1.2.0.dfsg-2
1:1.2.0.dfsg-3
1:1.2.0.dfsg-4
1:1.2.0.dfsg-5
1:1.2.0.dfsg-6
1:1.2.1.dfsg-1
1:1.2.1.dfsg-2
1:1.2.1.dfsg-3
1:1.2.4.dfsg-1
1:1.2.4.dfsg-2
1:1.2.4.dfsg-3
1:1.2.4.dfsg-4
1:1.2.4.dfsg-5
1:1.2.4.dfsg-6
1:1.2.4.dfsg-6+b1
1:1.2.4.dfsg-7
1:1.2.7.1.dfsg-1
1:1.2.7.1.dfsg-2
1:1.2.7.1.dfsg-3
1:1.2.9.1.dfsg-1
1:1.2.10.dfsg-1
1:1.2.10.dfsg-1bpo1
1:1.2.10.dfsg-2
1:1.2.10.dfsg-3
1:1.2.11.dfsg-1
1:1.2.12.1.dfsg-1
1:1.2.13~dfsg-1
1:1.2.13~dfsg-2
1:1.2.13~dfsg-2etch1
1:1.2.13~dfsg-2etch2
1:1.2.13~dfsg-2etch3
1:1.2.13~dfsg-2etch4
1:1.2.14~dfsg-1
1:1.2.14~dfsg-2
1:1.2.14~dfsg-3
1:1.2.14~dfsg-4
1:1.2.15~dfsg-1
1:1.2.16~dfsg-1
1:1.2.17~dfsg-1
1:1.4.2~dfsg-1
1:1.4.2~dfsg-2
1:1.4.2~dfsg-3
1:1.4.2~dfsg-4
1:1.4.2~dfsg-5
1:1.4.3~dfsg-1
1:1.4.4~dfsg-1
1:1.4.4~dfsg-2
1:1.4.4~dfsg-3
1:1.4.5~dfsg-1
1:1.4.6~dfsg-1
1:1.4.8~dfsg-1
1:1.4.8~dfsg-2
1:1.4.9~dfsg-1
1:1.4.10~dfsg-1
1:1.4.11~dfsg-1
1:1.4.11~dfsg-2
1:1.4.11~dfsg-3
1:1.4.11~dfsg-4
1:1.4.13~dfsg-1
1:1.4.15~dfsg-1
1:1.4.16.2~dfsg-1
1:1.4.16.2~dfsg-2
1:1.4.17~dfsg-1
1:1.4.17~dfsg-2
1:1.4.18~dfsg-1
1:1.4.18.1~dfsg-1