Description
The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message.
Affected products
- asterisk / asterisk_appliance_developer_kit
- asterisk / asterisk_business_editionb2.5.1
- asterisk / asterisk_business_editiona – a
- asterisk / asterisk_business_editionb.1.3.2 – b.1.3.2
- asterisk / asterisk_business_editionb.1.3.3 – b.1.3.3
- asterisk / asterisk_business_editionb.2.2.0 – b.2.2.0
- asterisk / asterisk_business_editionb.2.2.1 – b.2.2.1
- asterisk / asterisk_business_editionb.2.3.1 – b.2.3.1
- asterisk / asterisk_business_editionb.2.3.2 – b.2.3.2
- asterisk / asterisk_business_editionb.2.3.3 – b.2.3.3
- asterisk / asterisk_business_editionb.2.3.4 – b.2.3.4
- asterisk / asterisk_business_editionb.2.5.0 – b.2.5.0
- asterisk / asterisk_business_editionc.1.0-beta7 – c.1.0-beta7
- asterisk / asterisk_business_editionc.1.0-beta8 – c.1.0-beta8
- asterisk / asterisk_business_editionc.1.0beta7 – c.1.0beta7
- asterisk / asterisk_business_editionc.1.6.1 – c.1.6.1
- asterisk / asterisknow1.0.2
- asterisk / asterisknow1.0 – 1.0
- asterisk / asterisknow1.0.1 – 1.0.1
- asterisk / open_source1.0 – 1.0
- asterisk / open_source1.0.0 – 1.0.0
- asterisk / open_source1.0.1 – 1.0.1
- asterisk / open_source1.0.2 – 1.0.2
- asterisk / open_source1.0.3 – 1.0.3
- asterisk / open_source1.0.4 – 1.0.4
- asterisk / open_source1.0.5 – 1.0.5
- asterisk / open_source1.0.6 – 1.0.6
- asterisk / open_source1.0.7 – 1.0.7
- asterisk / open_source1.0.8 – 1.0.8
- asterisk / open_source1.0.9 – 1.0.9
- asterisk / open_source1.0.11 – 1.0.11
- asterisk / open_source1.0.11.1 – 1.0.11.1
- asterisk / open_source1.0.12 – 1.0.12
- asterisk / open_source1.2.0 – 1.2.0
- asterisk / open_source1.2.1 – 1.2.1
- asterisk / open_source1.2.2 – 1.2.2
- asterisk / open_source1.2.3 – 1.2.3
- asterisk / open_source1.2.3 – 1.2.3
- asterisk / open_source1.2.4 – 1.2.4
- asterisk / open_source1.2.4 – 1.2.4
- asterisk / open_source1.2.5 – 1.2.5
- asterisk / open_source1.2.5 – 1.2.5
- asterisk / open_source1.2.6 – 1.2.6
- asterisk / open_source1.2.6 – 1.2.6
- asterisk / open_source1.2.7 – 1.2.7
- asterisk / open_source1.2.7 – 1.2.7
- asterisk / open_source1.2.7.1 – 1.2.7.1
- asterisk / open_source1.2.7.1 – 1.2.7.1
- asterisk / open_source1.2.8 – 1.2.8
- asterisk / open_source1.2.8 – 1.2.8
- asterisk / open_source1.2.9 – 1.2.9
- asterisk / open_source1.2.9.1 – 1.2.9.1
- asterisk / open_source1.2.9.1 – 1.2.9.1
- asterisk / open_source1.2.10 – 1.2.10
- asterisk / open_source1.2.10 – 1.2.10
- asterisk / open_source1.2.11 – 1.2.11
- asterisk / open_source1.2.11 – 1.2.11
- asterisk / open_source1.2.12 – 1.2.12
- asterisk / open_source1.2.12 – 1.2.12
- asterisk / open_source1.2.12.1 – 1.2.12.1
- asterisk / open_source1.2.13 – 1.2.13
- asterisk / open_source1.2.13 – 1.2.13
- asterisk / open_source1.2.14 – 1.2.14
- asterisk / open_source1.2.14 – 1.2.14
- asterisk / open_source1.2.15 – 1.2.15
- asterisk / open_source1.2.15 – 1.2.15
- asterisk / open_source1.2.16 – 1.2.16
- asterisk / open_source1.2.16 – 1.2.16
- asterisk / open_source1.2.17 – 1.2.17
- asterisk / open_source1.2.17 – 1.2.17
- asterisk / open_source1.2.18 – 1.2.18
- asterisk / open_source1.2.18 – 1.2.18
- asterisk / open_source1.2.19 – 1.2.19
- asterisk / open_source1.2.19 – 1.2.19
- asterisk / open_source1.2.20 – 1.2.20
- asterisk / open_source1.2.20 – 1.2.20
- asterisk / open_source1.2.21 – 1.2.21
- asterisk / open_source1.2.21 – 1.2.21
- asterisk / open_source1.2.21.1 – 1.2.21.1
- asterisk / open_source1.2.21.1 – 1.2.21.1
- asterisk / open_source1.2.22 – 1.2.22
- asterisk / open_source1.2.22 – 1.2.22
- asterisk / open_source1.2.23 – 1.2.23
- asterisk / open_source1.2.23 – 1.2.23
- asterisk / open_source1.2.24 – 1.2.24
- asterisk / open_source1.2.24 – 1.2.24
- asterisk / open_source1.2.25 – 1.2.25
- asterisk / open_source1.2.25 – 1.2.25
- asterisk / open_source1.2.26 – 1.2.26
- asterisk / open_source1.2.26 – 1.2.26
- asterisk / open_source1.2.26.1 – 1.2.26.1
- asterisk / open_source1.2.26.1 – 1.2.26.1
- asterisk / open_source1.2.26.2 – 1.2.26.2
- asterisk / open_source1.2.26.2 – 1.2.26.2
- asterisk / open_source1.2.27 – 1.2.27
- asterisk / open_source1.2.28 – 1.2.28
- asterisk / open_source1.4.0 – 1.4.0
- asterisk / open_source1.4.0 – 1.4.0
- asterisk / open_source1.4.0 – 1.4.0
- asterisk / open_source1.4.0 – 1.4.0
- asterisk / open_source1.4.1 – 1.4.1
- asterisk / open_source1.4.2 – 1.4.2
- asterisk / open_source1.4.3 – 1.4.3
- asterisk / open_source1.4.4 – 1.4.4
- asterisk / open_source1.4.5 – 1.4.5
- asterisk / open_source1.4.6 – 1.4.6
- asterisk / open_source1.4.7 – 1.4.7
- asterisk / open_source1.4.7.1 – 1.4.7.1
- asterisk / open_source1.4.8 – 1.4.8
- asterisk / open_source1.4.9 – 1.4.9
- asterisk / open_source1.4.10 – 1.4.10
- asterisk / open_source1.4.10.1 – 1.4.10.1
- asterisk / open_source1.4.11 – 1.4.11
- asterisk / open_source1.4.12 – 1.4.12
- asterisk / open_source1.4.12.1 – 1.4.12.1
- asterisk / open_source1.4.13 – 1.4.13
- asterisk / open_source1.4.14 – 1.4.14
- asterisk / open_source1.4.15 – 1.4.15
- asterisk / open_source1.4.16 – 1.4.16
- asterisk / open_source1.4.16.1 – 1.4.16.1
- asterisk / open_source1.4.16.2 – 1.4.16.2
- asterisk / open_source1.4.17 – 1.4.17
- asterisk / open_source1.4.18 – 1.4.18
- asterisk / open_source1.4.18.1 – 1.4.18.1
- asterisk / open_source1.4.19 – 1.4.19
- asterisk / open_source1.4.19 – 1.4.19
- asterisk / open_source1.4.19 – 1.4.19
- asterisk / open_source1.4.19 – 1.4.19
- asterisk / s800i1.1.0.2
- asterisk / s800i1.0 – 1.0
- asterisk / s800i1.0.1 – 1.0.1
- asterisk / s800i1.0.2 – 1.0.2
- asterisk / s800i1.0.3 – 1.0.3
- asterisk / s800i1.0.3.3 – 1.0.3.3
- asterisk / s800i1.1.0 – 1.1.0
- asterisk / s800i1.1.0.1 – 1.1.0.1