Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-d791-zjab-jfh1
Vulnerability ID VCID-d791-zjab-jfh1
Aliases CVE-2008-0095
Summary The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message with an Also (Also transfer) header, which triggers a NULL pointer dereference.
Status Published
Exploitability 2.0
Weighted Severity 0.2
Risk 0.4
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
epss 0.26555 https://api.first.org/data/v1/epss?cve=CVE-2008-0095
epss 0.26555 https://api.first.org/data/v1/epss?cve=CVE-2008-0095
epss 0.26555 https://api.first.org/data/v1/epss?cve=CVE-2008-0095
epss 0.26555 https://api.first.org/data/v1/epss?cve=CVE-2008-0095
epss 0.26555 https://api.first.org/data/v1/epss?cve=CVE-2008-0095
epss 0.26555 https://api.first.org/data/v1/epss?cve=CVE-2008-0095
epss 0.26555 https://api.first.org/data/v1/epss?cve=CVE-2008-0095
epss 0.26555 https://api.first.org/data/v1/epss?cve=CVE-2008-0095
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2008-0095
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0095
458952 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=458952
CVE-2008-0095;OSVDB-39841 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/dos/30974.txt
CVE-2008-0095;OSVDB-39841 Exploit https://www.securityfocus.com/bid/27110/info
Data source Exploit-DB
Date added April 9, 2014
Description Asterisk 1.x - BYE Message Remote Denial of Service
Ransomware campaign use Unknown
Source publication date Jan. 2, 2008
Exploit type dos
Platform multiple
Source update date April 9, 2014
Source URL https://www.securityfocus.com/bid/27110/info
There are no known vectors.
Exploit Prediction Scoring System (EPSS)
Percentile 0.96291
EPSS Score 0.26555
Published At April 1, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-04-01T16:30:24.545087+00:00 Debian Oval Importer Import https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.0.0