VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Dec 26, 2008· Updated Apr 23, 2026

CVE-2008-5744

CVE-2008-5744

Description

Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to an incorrect tor2 patch for CVE-2008-5396 that uses the wrong variable in a range check against the value of lc->sync.

Affected products

4
  • Asterisk/Zaptel4 versions
    cpe:2.3:a:asterisk:zaptel:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:asterisk:zaptel:*:*:*:*:*:*:*:*range: <=1.4.11
    • cpe:2.3:a:asterisk:zaptel:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:asterisk:zaptel:1.2.27:*:*:*:*:*:*:*
    • cpe:2.3:a:asterisk:zaptel:1.4:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.