296,334
Total vulnerabilities in the database
Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to an incorrect tor2 patch for CVE-2008-5396 that uses the wrong variable in a range check against the value of lc->sync.
| Software | From | Fixed in |
|---|---|---|
| asterisk / zaptel | 1.4 | 1.4.x |
| asterisk / zaptel | 1.2.27 | 1.2.27.x |
| asterisk / zaptel | 1.2 | 1.2.x |
| asterisk / zaptel | - | 1.4.11.x |