Description
The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (traffic amplification) via an IAX2 FWDOWNL request.
Affected products
- asterisk / asterisk_appliance_developer_kit0.2 – 0.2
- asterisk / asterisk_appliance_developer_kit0.3 – 0.3
- asterisk / asterisk_appliance_developer_kit0.4 – 0.4
- asterisk / asterisk_appliance_developer_kit0.5 – 0.5
- asterisk / asterisk_appliance_developer_kit0.6 – 0.6
- asterisk / asterisk_appliance_developer_kit0.6.0 – 0.6.0
- asterisk / asterisk_appliance_developer_kit0.7 – 0.7
- asterisk / asterisk_appliance_developer_kit0.8 – 0.8
- asterisk / asterisk_business_editiona – a
- asterisk / asterisk_business_editionb – b
- asterisk / asterisk_business_editionb.1.3.2 – b.1.3.2
- asterisk / asterisk_business_editionb.1.3.3 – b.1.3.3
- asterisk / asterisk_business_editionb.2.2.0 – b.2.2.0
- asterisk / asterisk_business_editionb.2.2.1 – b.2.2.1
- asterisk / asterisk_business_editionb.2.3.1 – b.2.3.1
- asterisk / asterisk_business_editionb.2.3.2 – b.2.3.2
- asterisk / asterisk_business_editionb.2.3.3 – b.2.3.3
- asterisk / asterisk_business_editionb.2.3.4 – b.2.3.4
- asterisk / asterisk_business_editionb.2.3.6 – b.2.3.6
- asterisk / asterisk_business_editionb.2.5.0 – b.2.5.0
- asterisk / asterisk_business_editionb.2.5.3 – b.2.5.3
- asterisk / asterisk_business_editionb2.5.1 – b2.5.1
- asterisk / asterisk_business_editionb2.5.2 – b2.5.2
- asterisk / asterisk_business_editionc – c
- asterisk / asterisk_business_editionc.1.0-beta7 – c.1.0-beta7
- asterisk / asterisk_business_editionc.1.0-beta8 – c.1.0-beta8
- asterisk / asterisk_business_editionc.1.6 – c.1.6
- asterisk / asterisk_business_editionc.1.6.1 – c.1.6.1
- asterisk / asterisk_business_editionc.1.6.2 – c.1.6.2
- asterisk / asterisk_business_editionc1.8.0 – c1.8.0
- asterisk / asterisk_business_editionc1.8.1 – c1.8.1
- asterisk / asterisknowbeta_5 – beta_5
- asterisk / asterisknowbeta_6 – beta_6
- asterisk / asterisknowbeta_7 – beta_7
- asterisk / asterisknowpre-release – pre-release
- asterisk / open_source1.0 – 1.0
- asterisk / open_source1.0.0 – 1.0.0
- asterisk / open_source1.0.1 – 1.0.1
- asterisk / open_source1.0.2 – 1.0.2
- asterisk / open_source1.0.3 – 1.0.3
- asterisk / open_source1.0.3.4 – 1.0.3.4
- asterisk / open_source1.0.4 – 1.0.4
- asterisk / open_source1.0.5 – 1.0.5
- asterisk / open_source1.0.6 – 1.0.6
- asterisk / open_source1.0.7 – 1.0.7
- asterisk / open_source1.0.8 – 1.0.8
- asterisk / open_source1.0.9 – 1.0.9
- asterisk / open_source1.0.11 – 1.0.11
- asterisk / open_source1.0.11.1 – 1.0.11.1
- asterisk / open_source1.0.12 – 1.0.12
- asterisk / open_source1.2.0 – 1.2.0
- asterisk / open_source1.2.0beta1 – 1.2.0beta1
- asterisk / open_source1.2.0beta2 – 1.2.0beta2
- asterisk / open_source1.2.1 – 1.2.1
- asterisk / open_source1.2.2 – 1.2.2
- asterisk / open_source1.2.3 – 1.2.3
- asterisk / open_source1.2.4 – 1.2.4
- asterisk / open_source1.2.5 – 1.2.5
- asterisk / open_source1.2.6 – 1.2.6
- asterisk / open_source1.2.7 – 1.2.7
- asterisk / open_source1.2.7.1 – 1.2.7.1
- asterisk / open_source1.2.8 – 1.2.8
- asterisk / open_source1.2.9 – 1.2.9
- asterisk / open_source1.2.9.1 – 1.2.9.1
- asterisk / open_source1.2.10 – 1.2.10
- asterisk / open_source1.2.11 – 1.2.11
- asterisk / open_source1.2.12 – 1.2.12
- asterisk / open_source1.2.12.1 – 1.2.12.1
- asterisk / open_source1.2.13 – 1.2.13
- asterisk / open_source1.2.14 – 1.2.14
- asterisk / open_source1.2.15 – 1.2.15
- asterisk / open_source1.2.16 – 1.2.16
- asterisk / open_source1.2.17 – 1.2.17
- asterisk / open_source1.2.18 – 1.2.18
- asterisk / open_source1.2.19 – 1.2.19
- asterisk / open_source1.2.20 – 1.2.20
- asterisk / open_source1.2.21 – 1.2.21
- asterisk / open_source1.2.21.1 – 1.2.21.1
- asterisk / open_source1.2.22 – 1.2.22
- asterisk / open_source1.2.23 – 1.2.23
- asterisk / open_source1.2.24 – 1.2.24
- asterisk / open_source1.2.25 – 1.2.25
- asterisk / open_source1.2.26 – 1.2.26
- asterisk / open_source1.2.26.1 – 1.2.26.1
- asterisk / open_source1.2.26.2 – 1.2.26.2
- asterisk / open_source1.2.27 – 1.2.27
- asterisk / open_source1.2.28 – 1.2.28
- asterisk / open_source1.2.29 – 1.2.29
- asterisk / open_source1.4.0 – 1.4.0
- asterisk / open_source1.4.1 – 1.4.1
- asterisk / open_source1.4.2 – 1.4.2
- asterisk / open_source1.4.3 – 1.4.3
- asterisk / open_source1.4.4 – 1.4.4
- asterisk / open_source1.4.5 – 1.4.5
- asterisk / open_source1.4.6 – 1.4.6
- asterisk / open_source1.4.7 – 1.4.7
- asterisk / open_source1.4.7.1 – 1.4.7.1
- asterisk / open_source1.4.8 – 1.4.8
- asterisk / open_source1.4.9 – 1.4.9
- asterisk / open_source1.4.10 – 1.4.10
- asterisk / open_source1.4.10.1 – 1.4.10.1
- asterisk / open_source1.4.11 – 1.4.11
- asterisk / open_source1.4.12 – 1.4.12
- asterisk / open_source1.4.12.1 – 1.4.12.1
- asterisk / open_source1.4.13 – 1.4.13
- asterisk / open_source1.4.14 – 1.4.14
- asterisk / open_source1.4.15 – 1.4.15
- asterisk / open_source1.4.16 – 1.4.16
- asterisk / open_source1.4.16.1 – 1.4.16.1
- asterisk / open_source1.4.16.2 – 1.4.16.2
- asterisk / open_source1.4.17 – 1.4.17
- asterisk / open_source1.4.18 – 1.4.18
- asterisk / open_source1.4.18.1 – 1.4.18.1
- asterisk / open_source1.4.19 – 1.4.19
- asterisk / open_source1.4.19.1 – 1.4.19.1
- asterisk / open_source1.4.19_rc3 – 1.4.19_rc3
- asterisk / open_source1.4_revision_95946 – 1.4_revision_95946
- asterisk / open_source1.4beta – 1.4beta
References
- MISChttp://www.securitytracker.com/id?1020536
- MISChttp://security.gentoo.org/glsa/glsa-200905-01.xml
- VENDOR_ADVISORYhttp://secunia.com/advisories/31194
- VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/2168/references
- MISChttp://downloads.digium.com/pub/security/AST-2008-011.html
- MISChttps://www.redhat.com/archives/fedora-package-announce/2008-July/msg00839.html
- VENDOR_ADVISORYhttp://secunia.com/advisories/31178
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/43955
- MISChttp://www.securityfocus.com/bid/30350
- MISChttp://www.securityfocus.com/archive/1/494676/100/0/threaded
- VENDOR_ADVISORYhttp://secunia.com/advisories/34982