Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-psxt-4x3k-augy
Vulnerability ID VCID-psxt-4x3k-augy
Aliases CVE-2008-1289
Summary asterisk: Two buffer overflows in RTP Codec Payload Handling (AST-2008-002)
Status Published
Exploitability None
Weighted Severity None
Risk None
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.24953 https://api.first.org/data/v1/epss?cve=CVE-2008-1289
Reference id Reference type URL
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1289.json
https://api.first.org/data/v1/epss?cve=CVE-2008-1289
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1289
438127 https://bugzilla.redhat.com/show_bug.cgi?id=438127
CVE-2008-1289;OSVDB-43416 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/dos/31440.txt
CVE-2008-1289;OSVDB-43416 Exploit https://www.securityfocus.com/bid/28308/info
Data source Exploit-DB
Date added March 18, 2008
Description Asterisk 1.4.x - RTP Codec Payload Handling Multiple Buffer Overflow Vulnerabilities
Ransomware campaign use Known
Source publication date March 18, 2008
Exploit type dos
Platform linux
Source update date Feb. 6, 2014
Source URL https://www.securityfocus.com/bid/28308/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.9626
EPSS Score 0.24953
Published At May 29, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-29T10:19:54.077841+00:00 RedHat Importer Import https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1289.json 38.6.0