Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-ar64-v7yh-fug4
Vulnerability ID VCID-ar64-v7yh-fug4
Aliases CVE-2008-3263
Summary The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of service (call-number exhaustion and CPU consumption) by quickly sending a large number of IAX2 (IAX) POKE requests.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.36096 https://api.first.org/data/v1/epss?cve=CVE-2008-3263
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2008-3263
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3263
CVE-2008-3263;OSVDB-47253 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/32095.pl
CVE-2008-3263;OSVDB-47253 Exploit https://www.securityfocus.com/bid/30321/info
GLSA-200905-01 https://security.gentoo.org/glsa/200905-01
Data source Exploit-DB
Date added July 21, 2008
Description Asterisk 1.6 IAX - 'POKE' Requests Remote Denial of Service
Ransomware campaign use Known
Source publication date July 21, 2008
Exploit type dos
Platform linux
Source update date March 7, 2014
Source URL https://www.securityfocus.com/bid/30321/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.97174
EPSS Score 0.36096
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T13:40:57.792824+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0