Denial of Service Vulnerability in Asterisk Open Source and Business Edition
CVE-2008-2119

Currently unrated

Key Information:

Vendor: Asterisk
Status: Asterisk Business Edition; Open Source
Vendor: CVE Published:; 4 June 2008

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 12%

What is CVE-2008-2119?

A vulnerability in Asterisk Open Source versions 1.0.x and 1.2.x before 1.2.29, along with Business Edition A.x.x and B.x.x before B.2.5.3, allows remote attackers to trigger a denial of service condition. This occurs when pedantic parsing is enabled, by sending a specially crafted SIP INVITE message that lacks a From header. The flaw is associated with improper handling of certain input during SIP message processing, specifically concerning an empty const string and a NULL pointer, leading to the daemon crashing.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-2119 - Proof of Concept