CVE-2008-1332: Asterisk

High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header.

Affected products

• Asterisk Asterisk: version a only; version b.1.3.2 only; version b.1.3.3 only; version b.2.2.0 only; version b.2.2.1 only; version b.2.3.1 only; …
• Asterisk Asterisk Appliance Developer Kit: up to and including 1.4; version 0.2 only; version 0.3 only; version 0.4 only; version 0.5 only; version 0.6 only; …
• Asterisk Asterisk Business Edition: up to and including a; up to and including b.2.5.0; up to and including c.1.6.1
• Asterisk Asterisknow: up to and including 1.0.1; version 1.0 only
• Asterisk Open Source: up to and including 1.2.26; up to and including 1.4.17; up to and including 1.4.19; version 1.0 only; version 1.0.0 only; version 1.0.1 only; …
• Asterisk s800i: up to and including 1.1.0.1; version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.0.3 only; version 1.0.3.3 only; …

Published 2008-03-20. Last modified 2026-06-16.