VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 26, 2008· Updated Jun 16, 2026

CVE-2008-5744

CVE-2008-5744

Description

Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to an incorrect tor2 patch for CVE-2008-5396 that uses the wrong variable in a range check against the value of lc->sync.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Asterisk/Zaptel4 versions
    cpe:2.3:a:asterisk:zaptel:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:asterisk:zaptel:*:*:*:*:*:*:*:*range: <=1.4.11
    • cpe:2.3:a:asterisk:zaptel:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:asterisk:zaptel:1.2.27:*:*:*:*:*:*:*
    • cpe:2.3:a:asterisk:zaptel:1.4:*:*:*:*:*:*:*
  • DAHDI/dahdi/tor2.cllm-create
    Range: <=1.4.11
  • Zaptel/Zaptelllm-create
    Range: <=1.4.11
  • Digium/DAHDIllm-fuzzy
    Range: <=1.4.11

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.