Vulnerability Database

296,334

Total vulnerabilities in the database

CVE-2008-5396

Array index error in the (1) torisa.c and (2) dahdi/tor2.c drivers in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to missing validation of the sync field associated with the ZT_SPANCONFIG ioctl.

  • Published: Dec 9, 2008
  • Updated: Apr 13, 2023
  • CVE: CVE-2008-5396
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

Software From Fixed in
asterisk / zaptel 1.4 1.4.x
asterisk / zaptel 1.2.27 1.2.27.x
asterisk / zaptel 1.2 1.2.x
asterisk / zaptel - 1.4.11.x