CVE-2009-2346

Categorías

Overflow

EPSS

0.75%V4

Vector

Network

Publicado

2009-09-08
18h00 +00:00

Modificado

2024-08-07
05h44 +00:00

Enlaces oficiales

CVE.org

NVD

Notificaciones para una CVE

Manténgase informado sobre cualquier cambio en una CVE específica.

Gestionar notificaciones

Alertas personalizadas

¡Active sus alertas personalizadas!

Para activar sus alertas, solo necesita iniciar sesión en su cuenta gratuita. Si aún no ha iniciado sesión, elija una de las opciones a continuación.

Iniciar sesión en su cuenta Crear una cuenta gratuita

Notificaciones para una CVE

Manténgase informado sobre cualquier cambio en una CVE específica.

Criterios aplicados al enviar la alerta: comparado con la última alerta enviada + diferencias en CISA, EPSS, CVSS, CWE, soluciones, CPE.

Parámetros

Puede especificar un título que se recuperará en las alertas que se enviarán.

Especifique aquí un ID de CVE como CVE-2025-1234

Planificación

Mes

Cálculo de la próxima ejecución

Día

Día de la semana

Hora

Minuto

Fecha de creación

Última ejecución

Próxima ejecución

Descripciones CVE

The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263.

Informaciones CVE

Debilidades relacionadas

CWE-ID	Nombre de la debilidad	Source
CWE-119	Improper Restriction of Operations within the Bounds of a Memory Buffer The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Métricas

Métricas	Puntuación	Gravedad	CVSS Vector	Source
V2	7.8		AV:N/AC:L/Au:N/C:N/I:N/A:C	nvd@nist.gov

EPSS

EPSS es un modelo de puntuación que predice la probabilidad de que una vulnerabilidad sea explotada.

Puntuación EPSS

El modelo EPSS produce una puntuación de probabilidad entre 0 y 1 (0 y 100%). Cuanto mayor sea la puntuación, mayor será la probabilidad de que se explote una vulnerabilidad.

Percentil EPSS

El percentil se usa para clasificar las CVE según su puntuación EPSS. Por ejemplo, una CVE en el percentil 95 según su puntuación EPSS tiene más probabilidades de ser explotada que el 95% de otras CVE. Así, el percentil sirve para comparar la puntuación EPSS de una CVE con la de otras CVE.

EPSS First.org

Products Mentioned

Configuraton 0

Asterisk>>Asterisk >> Version b.1.3.2

Asterisk>>Asterisk >> Version b.1.3.3

Asterisk>>Asterisk >> Version b.2.2.0

Asterisk>>Asterisk >> Version b.2.2.1

Asterisk>>Asterisk >> Version b.2.3.1

Asterisk>>Asterisk >> Version b.2.3.2

Asterisk>>Asterisk >> Version b.2.3.3

Asterisk>>Asterisk >> Version b.2.3.4

Asterisk>>Asterisk >> Version b.2.3.5

Asterisk>>Asterisk >> Version b.2.3.6

Asterisk>>Asterisk >> Version b.2.5.1

Asterisk>>Asterisk >> Version b.2.5.3

Asterisk>>Asterisk >> Version b.2.5.4

Asterisk>>Asterisk >> Version b.2.5.5

Asterisk>>Asterisk >> Version b.2.5.6

Asterisk>>Asterisk >> Version b.2.5.8

Asterisk>>Asterisk >> Version b.2.5.9

Asterisk>>Asterisk >> Version c.1.0_beta7

Asterisk>>Asterisk >> Version c.1.0_beta8

Asterisk>>Asterisk >> Version c.1.6

Asterisk>>Asterisk >> Version c.1.6.1

Asterisk>>Asterisk >> Version c.1.6.2

Asterisk>>Asterisk >> Version c.1.8.1

Asterisk>>Asterisk >> Version c.1.10.3

Asterisk>>Asterisk >> Version c.1.10.4

Asterisk>>Asterisk >> Version c.1.10.5

Asterisk>>Asterisk >> Version c.2.1.2.1

Asterisk>>Asterisk >> Version c.2.3

Asterisk>>Asterisk >> Version c.2.3.3

Asterisk>>Asterisk >> Version c.2.4.2

Asterisk>>Asterisk >> Version c.3.1.0

Asterisk>>Open_source >> Version 1.2.0

Asterisk>>Open_source >> Version 1.2.1

Asterisk>>Open_source >> Version 1.2.2

Asterisk>>Open_source >> Version 1.2.3

Asterisk>>Open_source >> Version 1.2.4

Asterisk>>Open_source >> Version 1.2.5

Asterisk>>Open_source >> Version 1.2.6

Asterisk>>Open_source >> Version 1.2.7

Asterisk>>Open_source >> Version 1.2.7.1

Asterisk>>Open_source >> Version 1.2.8

Asterisk>>Open_source >> Version 1.2.9

Asterisk>>Open_source >> Version 1.2.9.1

Asterisk>>Open_source >> Version 1.2.10

Asterisk>>Open_source >> Version 1.2.11

Asterisk>>Open_source >> Version 1.2.12

Asterisk>>Open_source >> Version 1.2.12.1

Asterisk>>Open_source >> Version 1.2.13

Asterisk>>Open_source >> Version 1.2.14

Asterisk>>Open_source >> Version 1.2.15

Asterisk>>Open_source >> Version 1.2.16

Asterisk>>Open_source >> Version 1.2.17

Asterisk>>Open_source >> Version 1.2.18

Asterisk>>Open_source >> Version 1.2.19

Asterisk>>Open_source >> Version 1.2.20

Asterisk>>Open_source >> Version 1.2.21

Asterisk>>Open_source >> Version 1.2.21.1

Asterisk>>Open_source >> Version 1.2.22

Asterisk>>Open_source >> Version 1.2.23

Asterisk>>Open_source >> Version 1.2.24

Asterisk>>Open_source >> Version 1.2.25

Asterisk>>Open_source >> Version 1.2.26

Asterisk>>Open_source >> Version 1.2.26.1

Asterisk>>Open_source >> Version 1.2.26.2

Asterisk>>Open_source >> Version 1.2.27

Asterisk>>Open_source >> Version 1.2.28

Asterisk>>Open_source >> Version 1.2.29

Asterisk>>Open_source >> Version 1.2.30

Asterisk>>Open_source >> Version 1.2.30.2

Asterisk>>Open_source >> Version 1.2.30.3

Asterisk>>Open_source >> Version 1.2.30.4

Asterisk>>Open_source >> Version 1.2.31

Asterisk>>Open_source >> Version 1.2.32

Asterisk>>Open_source >> Version 1.2.33

Asterisk>>Open_source >> Version 1.2.34

Asterisk>>Open_source >> Version 1.4.0

Asterisk>>Open_source >> Version 1.4.1

Asterisk>>Open_source >> Version 1.4.2

Asterisk>>Open_source >> Version 1.4.3

Asterisk>>Open_source >> Version 1.4.4

Asterisk>>Open_source >> Version 1.4.5

Asterisk>>Open_source >> Version 1.4.6

Asterisk>>Open_source >> Version 1.4.7

Asterisk>>Open_source >> Version 1.4.7.1

Asterisk>>Open_source >> Version 1.4.8

Asterisk>>Open_source >> Version 1.4.9

Asterisk>>Open_source >> Version 1.4.10

Asterisk>>Open_source >> Version 1.4.10.1

Asterisk>>Open_source >> Version 1.4.11

Asterisk>>Open_source >> Version 1.4.12

Asterisk>>Open_source >> Version 1.4.12.1

Asterisk>>Open_source >> Version 1.4.13

Asterisk>>Open_source >> Version 1.4.14

Asterisk>>Open_source >> Version 1.4.15

Asterisk>>Open_source >> Version 1.4.16

Asterisk>>Open_source >> Version 1.4.16.1

Asterisk>>Open_source >> Version 1.4.16.2

Asterisk>>Open_source >> Version 1.4.17

Asterisk>>Open_source >> Version 1.4.18

Asterisk>>Open_source >> Version 1.4.18.1

Asterisk>>Open_source >> Version 1.4.19

Asterisk>>Open_source >> Version 1.4.19.1

Asterisk>>Open_source >> Version 1.4.19.2

Asterisk>>Open_source >> Version 1.4.20

Asterisk>>Open_source >> Version 1.4.21

Asterisk>>Open_source >> Version 1.4.21.1

Asterisk>>Open_source >> Version 1.4.21.2

Asterisk>>Open_source >> Version 1.4.22

Asterisk>>Open_source >> Version 1.4.22.1

Asterisk>>Open_source >> Version 1.4.22.2

Asterisk>>Open_source >> Version 1.4.23

Asterisk>>Open_source >> Version 1.4beta

Asterisk>>Open_source >> Version 1.6.0

Asterisk>>Open_source >> Version 1.6.0.1

Asterisk>>Open_source >> Version 1.6.0.2

Asterisk>>Open_source >> Version 1.6.0.3

Asterisk>>Open_source >> Version 1.6.1.0

Asterisk>>Open_source >> Version 1.6.1.5

Asterisk>>Opensource >> Version 1.4.23.2

Asterisk>>Opensource >> Version 1.4.24

Asterisk>>Opensource >> Version 1.4.24.1

Asterisk>>Opensource >> Version 1.4.26

Asterisk>>Opensource >> Version 1.4.26.1

Sangoma>>Asterisk >> Version 1.6.1

Sangoma>>Asterisk >> Version 1.6.1.4

Asterisk>>Appliance_s800i >> Version 1.3

Asterisk>>Appliance_s800i >> Version 1.3.0.2

Referencias

http://securitytracker.com/id?1022819
Tags : vdb-entry, x_refsource_SECTRACK

http://www.securityfocus.com/archive/1/506257/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

http://secunia.com/advisories/36593
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/36275
Tags : vdb-entry, x_refsource_BID

http://downloads.asterisk.org/pub/security/AST-2009-006.html
Tags : x_refsource_CONFIRM

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.21%	–	–
2022-03-27	–	–	1.21%	–	–
2022-04-03	–	–	1.21%	–	–
2022-05-08	–	–	1.21%	–	–
2022-08-28	–	–	1.21%	–	–
2023-02-26	–	–	1.21%	–	–
2023-03-12	–	–	–	4.74%	–
2023-07-09	–	–	–	4.74%	–
2024-04-07	–	–	–	4.74%	–
2024-06-02	–	–	–	4.74%	–
2024-06-02	–	–	–	4.74%	–
2024-08-25	–	–	–	5.77%	–
2024-09-08	–	–	–	5.77%	–
2024-09-29	–	–	–	5.77%	–
2024-10-06	–	–	–	5.77%	–
2024-12-22	–	–	–	73.93%	–
2025-01-05	–	–	–	69.94%	–
2025-01-19	–	–	–	69.94%	–
2025-02-16	–	–	–	71.45%	–
2025-02-16	–	–	–	71.45%	–
2025-03-18	–	–	–	–	0.84%
2025-04-22	–	–	–	–	0.84%
2025-11-18	–	–	–	–	0.84%
2025-11-21	–	–	–	–	0.84%
2026-02-22	–	–	–	–	0.75%

Date	Percentile
2022-02-06	41%
2022-03-27	42%
2022-04-03	64%
2022-05-08	65%
2022-08-28	66%
2023-02-26	67%
2023-03-12	91%
2023-07-09	92%
2024-04-07	93%
2024-06-02	93%
2024-06-02	93%
2024-08-25	93%
2024-09-08	94%
2024-09-29	93%
2024-10-06	94%
2024-12-22	98%
2025-01-05	98%
2025-01-19	98%
2025-02-16	98%
2025-02-16	98%
2025-03-18	73%
2025-04-22	74%
2025-11-18	73%
2025-11-21	74%
2026-02-22	73%

CVE-2009-2346 : Detalle

CVE-2009-2346

Descripciones CVE

Informaciones CVE

Debilidades relacionadas

Métricas

EPSS

Puntuación EPSS

Percentil EPSS

Products Mentioned

Configuraton 0

Referencias