Security Advisory

CVE-2008-2119

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2008-06-04 19:17:00

Last updated 2024-08-07 08:49:58

Assigner mitre

State PUBLISHED

Description

Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.

← Browse all CVEs View on cve.org ↗