Vulnerability in Asterisk Zaptel
CVE-2008-5396
Array index error in the (1) torisa.c and (2) dahdi/tor2.c drivers in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to missing validation of the sync field associated with the ZT_SPANCONFIG ioctl.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.2 (High). Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.003 (25.9th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 26th percentile — 25.9% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Asterisk Zaptel — versions 1.2, 1.2.27, 1.4
Weakness classification (CWE)
References
- www.openwall.com/lists/oss-security/2008/12/03/10 (mailing-list)
- bugs.digium.com/view.php
- bugs.debian.org/cgi-bin/bugreport.cgi
- secunia.com/advisories/32947 (third-party-advisory)
- secunia.com/advisories/32960 (third-party-advisory)