Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-p4z2-vafe-2kcq
Vulnerability ID VCID-p4z2-vafe-2kcq
Aliases CVE-2008-0095
Summary The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference.
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.26555 https://api.first.org/data/v1/epss?cve=CVE-2008-0095
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2008-0095
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0095
458952 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=458952
CVE-2008-0095;OSVDB-39841 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/30974.txt
CVE-2008-0095;OSVDB-39841 Exploit https://www.securityfocus.com/bid/27110/info
Data source Exploit-DB
Date added April 9, 2014
Description Asterisk 1.x - BYE Message Remote Denial of Service
Ransomware campaign use Unknown
Source publication date Jan. 2, 2008
Exploit type dos
Platform multiple
Source update date April 9, 2014
Source URL https://www.securityfocus.com/bid/27110/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.96421
EPSS Score 0.26555
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T13:40:54.426814+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0