CVE-2008-5744

Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows...

7.2 HighFix available

Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows local users in the dialout group to overwrite an integer value in kernel memory by writing to /dev/zap/ctl, related to an incorrect tor2 patch for CVE-2008-5396 that uses the wrong variable in a range check against the value of lc->sync.

Exploit likelihood

0.47%Down 1.6 points since Feb 4, 2022

What each source reports

NVD Score used 7.2

Record: CVE-2008-5744
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-189
Updated: 2026-11-02

CVE List No score

Record: CVE-2008-5744
Updated: 2026-11-02

EUVDEUVD-2008-5714 No score

Record: EUVD-2008-5714
Updated: 2026-11-03

GitHub AdvisoriesGHSA-86mj-x9g2-c7rh No score

Array index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows...

Record: GHSA-86mj-x9g2-c7rh
Updated: 2026-11-02

Affected products

asterisk zaptel

Affected packages

Affected packages
Package	Affected	Fixed
`zaptel` Debian:4.0	before 1:1.2.11.dfsg-1+etch1, plus listed versions 1:1.2.11.dfsg-1	1:1.2.11.dfsg-1+etch1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-5744 is a high vulnerability (CVSS 7.2) in Asterisk Zaptel, published December 26, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. Fixed in zaptel 1:1.2.11.dfsg-1+etch1.