Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

digium asterisk 1.6.2.4 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-4598
The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x prior to 1.6.2.21 and 1.8.x prior to 1.8.7.2, when automon is enabled, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted sequ...
Digium Asterisk 1.8.4Digium Asterisk 1.8.3.3Digium Asterisk 1.8.0Digium Asterisk 1.8.2.2Digium Asterisk 1.8.2.1Digium Asterisk 1.8.3Digium Asterisk 1.8.3.2Digium Asterisk 1.8.4.1Digium Asterisk 1.8.2Digium Asterisk 1.8.2.4Digium Asterisk 1.8.4.2Digium Asterisk 1.8.4.3Digium Asterisk 1.8.6.0Digium Asterisk 1.8.1.1Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3.1Digium Asterisk 1.8.5Digium Asterisk 1.8.5.0Digium Asterisk 1.8.7.0Digium Asterisk 1.8.7.1Digium Asterisk 1.8.1.2Digium Asterisk 1.8.1
NA
CVE-2010-1224
main/acl.c in Asterisk Open Source 1.6.0.x prior to 1.6.0.25, 1.6.1.x prior to 1.6.1.17, and 1.6.2.x prior to 1.6.2.5 does not properly enforce remote host access controls when CIDR notation "/0" is used in permit= and deny= configuration rules, which causes an improper...
Digium Asterisk 1.6.0.23Digium Asterisk 1.6.0.22Digium Asterisk 1.6.0.18Digium Asterisk 1.6.0.12Digium Asterisk 1.6.0.10Digium Asterisk 1.6.0.9Digium Asterisk 1.6.0.1Digium Asterisk 1.6.0Digium Asterisk 1.6.1.7Digium Asterisk 1.6.1.11Digium Asterisk 1.6.1.12Digium Asterisk 1.6.2.0Digium Asterisk 1.6.2.1Digium Asterisk 1.6.2.2Digium Asterisk 1.6.0.24Digium Asterisk 1.6.0.14Digium Asterisk 1.6.0.13Digium Asterisk 1.6.0.3Digium Asterisk 1.6.0.2Digium Asterisk 1.6.1.5Digium Asterisk 1.6.1.6Digium Asterisk 1.6.1.10
NA
CVE-2011-1175
tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x prior to 1.6.1.23, 1.6.2.x prior to 1.6.2.17.1, and 1.8.x prior to 1.8.3.1 allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) by establishing many short TCP sessions...
Digium Asterisk 1.6.1.21Digium Asterisk 1.6.1.20Digium Asterisk 1.6.1.1Digium Asterisk 1.6.1Digium Asterisk 1.6.1.5Digium Asterisk 1.6.1.9Digium Asterisk 1.6.1.10Digium Asterisk 1.6.1.13Digium Asterisk 1.6.1.0Digium Asterisk 1.6.1.16Digium Asterisk 1.6.1.19Digium Asterisk 1.6.1.2Digium Asterisk 1.6.1.7Digium Asterisk 1.6.1.18Digium Asterisk 1.6.1.14Digium Asterisk 1.6.1.22Digium Asterisk 1.6.1.3Digium Asterisk 1.6.1.4Digium Asterisk 1.6.1.8Digium Asterisk 1.6.1.12Digium Asterisk 1.6.1.11Digium Asterisk 1.6.1.6
NA
CVE-2011-1174
manager.c in Asterisk Open Source 1.6.1.x prior to 1.6.1.24, 1.6.2.x prior to 1.6.2.17.2, and 1.8.x prior to 1.8.3.2 allows remote malicious users to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data.
Digium Asterisk 1.6.1.20Digium Asterisk 1.6.1.19Digium Asterisk 1.6.1.10Digium Asterisk 1.6.1Digium Asterisk 1.6.1.6Digium Asterisk 1.6.1.7Digium Asterisk 1.6.1.21Digium Asterisk 1.6.1.1Digium Asterisk 1.6.1.5Digium Asterisk 1.6.1.9Digium Asterisk 1.6.1.17Digium Asterisk 1.6.1.13Digium Asterisk 1.6.1.0Digium Asterisk 1.6.1.16Digium Asterisk 1.6.1.18Digium Asterisk 1.6.1.12Digium Asterisk 1.6.1.15Digium Asterisk 1.6.1.23Digium Asterisk 1.6.1.22Digium Asterisk 1.6.1.3Digium Asterisk 1.6.1.4Digium Asterisk 1.6.1.8
NA
CVE-2011-2529
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x prior to 1.6.2.18.1 and 1.8.x prior to 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote malicious users to cause a denial of service (memory corruption) or possibly ha...
Digium Asterisk 1.6.0Digium Asterisk 1.6.1Digium Asterisk 1.6.1.2Digium Asterisk 1.6.1.3Digium Asterisk 1.6.0.26Digium Asterisk 1.6.1.8Digium Asterisk 1.6.1.18Digium Asterisk 1.6.0.8Digium Asterisk 1.6.0.11Digium Asterisk 1.6.0.16Digium Asterisk 1.6.0.21Digium Asterisk 1.6.0.18Digium Asterisk 1.6.0.13Digium Asterisk 1.6.1.12Digium Asterisk 1.6.1.19Digium Asterisk 1.6.1.0Digium Asterisk 1.6.1.13Digium Asterisk 1.6.1.22Digium Asterisk 1.6.0.5Digium Asterisk 1.6.1.24Digium Asterisk 1.6.2.0Digium Asterisk 1.6.2.3
NA
CVE-2011-2666
The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x up to and including 1.4.41.2 and 1.6.2.x up to and including 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote malicious users to enumerate account names by making a series...
Digium Asterisk 1.6.2.16.2Digium Asterisk 1.6.2.6Digium Asterisk 1.6.2.0Digium Asterisk 1.6.2.1Digium Asterisk 1.6.2.17Digium Asterisk 1.6.2.18Digium Asterisk 1.6.2.2Digium Asterisk 1.6.2.3Digium Asterisk 1.6.2.17.3Digium Asterisk 1.6.2.16Digium Asterisk 1.6.2.17.2Digium Asterisk 1.6.2.15Digium Asterisk 1.6.2.5Digium Asterisk 1.6.2.16.1Digium Asterisk 1.6.2.4Digium Asterisk 1.6.2.17.1Digium Asterisk 1.6.2.18.1Digium Asterisk 1.6.2.18.2Digium Asterisk 1.4.29Digium Asterisk 1.4.19Digium Asterisk 1.4.30Digium Asterisk 1.4.2
NA
CVE-2011-4597
The SIP over UDP implementation in Asterisk Open Source 1.4.x prior to 1.4.43, 1.6.x prior to 1.6.2.21, and 1.8.x prior to 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote malicious users to enum...
Digium Asterisk 1.8.1.2Digium Asterisk 1.8.1Digium Asterisk 1.8.0Digium Asterisk 1.8.3Digium Asterisk 1.8.4.4Digium Asterisk 1.8.5Digium Asterisk 1.8.7.0Digium Asterisk 1.8.4Digium Asterisk 1.8.4.1Digium Asterisk 1.8.2Digium Asterisk 1.8.2.4Digium Asterisk 1.8.4.2Digium Asterisk 1.8.4.3Digium Asterisk 1.8.6.0Digium Asterisk 1.8.3.3Digium Asterisk 1.8.2.2Digium Asterisk 1.8.2.1Digium Asterisk 1.8.3.2Digium Asterisk 1.8.1.1Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3.1Digium Asterisk 1.8.5.0
NA
CVE-2011-2535
chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x prior to 1.4.41.1, 1.6.2.x prior to 1.6.2.18.1, and 1.8.x prior to 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote m...
Digium Asterisk 1.8.4Digium Asterisk 1.8.0Digium Asterisk 1.8.3.3Digium Asterisk 1.8.2.3Digium Asterisk 1.8.2.2Digium Asterisk 1.8.3Digium Asterisk 1.8.4.1Digium Asterisk 1.8.1Digium Asterisk 1.8.4.2Digium Asterisk 1.8.1.2Digium Asterisk 1.8.1.1Digium Asterisk 1.8.3.1Digium Asterisk 1.8.2.1Digium Asterisk 1.8.2Digium Asterisk 1.8.3.2Digium Asterisk 1.8.2.4Digium Asterisk 1.6.2.16.1Digium Asterisk 1.6.2.0Digium Asterisk 1.6.2.15Digium Asterisk 1.6.2.17Digium Asterisk 1.6.2.17.1Digium Asterisk 1.6.2.16
NA
CVE-2011-2536
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x prior to 1.4.41.2, 1.6.2.x prior to 1.6.2.18.2, and 1.8.x prior to 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid ...
Digium Asterisk 1.8.1.2Digium Asterisk 1.8.1Digium Asterisk 1.8.0Digium Asterisk 1.8.3Digium Asterisk 1.8.4.3Digium Asterisk 1.8.4Digium Asterisk 1.8.4.1Digium Asterisk 1.8.2Digium Asterisk 1.8.2.4Digium Asterisk 1.8.4.2Digium Asterisk 1.8.3.3Digium Asterisk 1.8.2.2Digium Asterisk 1.8.2.1Digium Asterisk 1.8.3.2Digium Asterisk 1.8.1.1Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3.1Digium Asterisk 1.6.2.5Digium Asterisk 1.6.2.16.1Digium Asterisk 1.6.2.0Digium Asterisk 1.6.2.15Digium Asterisk 1.6.2.17
NA
CVE-2011-1147
Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x prior to 1.4.39.2, 1.6.1.x prior to 1.6.1.22, 1.6.2.x prior to 1.6.2.16.2, and 1.8 prior to 1.8.2.4; Business Edition C...
Digium Asterisk 1.4.29Digium Asterisk 1.4.19Digium Asterisk 1.4.19.2Digium Asterisk 1.4.30Digium Asterisk 1.4.20Digium Asterisk 1.4.20.1Digium Asterisk 1.4.0Digium Asterisk 1.4.10.1Digium Asterisk 1.4.17Digium Asterisk 1.4.16.2Digium Asterisk 1.4.25.1Digium Asterisk 1.4.25Digium Asterisk 1.4.26.3Digium Asterisk 1.4.22Digium Asterisk 1.4.23.2Digium Asterisk 1.4.23Digium Asterisk 1.4.28Digium Asterisk 1.4.29.1Digium Asterisk 1.4.21Digium Asterisk 1.4.21.1Digium Asterisk 1.4.15Digium Asterisk 1.4.13
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22460CVE-2024-4646CVE-2024-29212IMAPCVE-2023-36672CVE-2024-34547command injectionCVE-2024-4651stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook