vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2009-2346

N/A
Published: September 8, 2009 at 06:00 PM UTC
Updated: June 16, 2026 at 11:09 PM UTC
4 products affected across 2 vendorsAsteriskAsteriskOpen Source

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 3%

Description

The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Appliance S800I· Asterisk
95%
1.31.3.0.2
Asterisk· Asterisk
95%
b.1.3.2b.1.3.3b.2.2.0b.2.2.1b.2.3.1b.2.3.2b.2.3.3b.2.3.4b.2.3.5b.2.3.6b.2.5.1b.2.5.3b.2.5.4b.2.5.5b.2.5.6b.2.5.8b.2.5.9c.1.0_beta7c.1.0_beta8c.1.10.3c.1.10.4c.1.10.5c.1.6c.1.6.1c.1.6.2c.1.8.1c.2.1.2.1c.2.3c.2.3.3c.2.4.2c.3.1.0
Open Source· Asterisk
95%
1.2.01.2.0 beta11.2.0 beta21.2.0 rc11.2.0 rc21.2.11.2.101.2.10 netsec1.2.111.2.11 netsec1.2.121.2.12 netsec1.2.12.11.2.12.1 netsec1.2.131.2.13 netsec1.2.141.2.14 netsec1.2.151.2.15 netsec1.2.161.2.16 netsec1.2.171.2.17 netsec1.2.181.2.18 netsec1.2.191.2.19 netsec1.2.21.2.2 netsec1.2.201.2.20 netsec1.2.211.2.21 netsec1.2.21.11.2.21.1 netsec1.2.221.2.22 netsec1.2.231.2.23 netsec1.2.241.2.24 netsec1.2.251.2.25 netsec1.2.261.2.26 netsec1.2.26.11.2.26.1 netsec1.2.26.21.2.26.2 netsec1.2.271.2.281.2.291.2.31.2.3 netsec1.2.301.2.30.21.2.30.31.2.30.41.2.311.2.321.2.331.2.341.2.41.2.4 netsec1.2.51.2.5 netsec1.2.61.2.6 netsec1.2.71.2.7 netsec1.2.7.11.2.7.1 netsec1.2.81.2.8 netsec1.2.91.2.9.11.2.9.1 netsec1.4.01.4.0 beta21.4.0 beta31.4.0 beta41.4.11.4.101.4.10.11.4.111.4.121.4.12.11.4.131.4.141.4.151.4.161.4.16.11.4.16.21.4.171.4.181.4.18.11.4.191.4.19 rc-21.4.19 rc11.4.19 rc21.4.19 rc31.4.19 rc41.4.19.11.4.19.21.4.21.4.201.4.20 rc11.4.20 rc21.4.20 rc31.4.211.4.21 rc11.4.21 rc21.4.21.11.4.21.21.4.221.4.22 rc31.4.22 rc41.4.22.11.4.22.21.4.231.4.23 rc11.4.23 rc21.4.23 rc31.4.23.21.4.241.4.24.11.4.261.4.26.11.4.31.4.41.4.51.4.61.4.71.4.7.11.4.81.4.91.4beta1.6.0 beta11.6.0 beta21.6.0 beta31.6.0 beta41.6.0 beta51.6.0 beta71.6.0 beta7.11.6.0 beta81.6.0 beta91.6.0 rc41.6.0 rc51.6.0 rc61.6.0.11.6.0.21.6.0.31.6.0.3 rc11.6.1.0 rc11.6.1.0 rc21.6.1.5
Asterisk· Sangoma
95%
1.6.11.6.1.4

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (5)

x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://downloads.asterisk.org/pub/security/AST-2009-006.html
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/36593
VDB Entryx_refsource_SECTRACK
Source: [email protected]
http://securitytracker.com/id?1022819
Mailing Listx_refsource_BUGTRAQ
Source: [email protected]
http://www.securityfocus.com/archive/1/506257/100/0/threaded
VDB Entryx_refsource_BID
Source: [email protected]
http://www.securityfocus.com/bid/36275

CVSS

7.8HIGH[email protected]
Confidentiality
NONE
Integrity
NONE
Availability
COMPLETE
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card