Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2011-2529

Published: 06/07/2011 Updated: 29/08/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Digium

Vulnerability Summary

chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x prior to 1.6.2.18.1 and 1.8.x prior to 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote malicious users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet.

Vulnerable Product Search on Vulmon Subscribe to Product

digium asterisk 1.6.0

digium asterisk 1.6.1

digium asterisk 1.6.1.2

digium asterisk 1.6.1.3

digium asterisk 1.6.0.26

digium asterisk 1.6.1.8

digium asterisk 1.6.1.18

digium asterisk 1.6.0.8

digium asterisk 1.6.0.11

digium asterisk 1.6.0.16

digium asterisk 1.6.0.21

digium asterisk 1.6.0.18

digium asterisk 1.6.0.13

digium asterisk 1.6.1.12

digium asterisk 1.6.1.19

digium asterisk 1.6.1.0

digium asterisk 1.6.1.13

digium asterisk 1.6.1.22

digium asterisk 1.6.0.5

digium asterisk 1.6.1.24

digium asterisk 1.6.2.0

digium asterisk 1.6.2.3

digium asterisk 1.6.2.4

digium asterisk 1.6.2.16.2

digium asterisk 1.6.2.6

digium asterisk 1.6.1.20

digium asterisk 1.6.1.4

digium asterisk 1.6.1.5

digium asterisk 1.6.0.23

digium asterisk 1.6.1.9

digium asterisk 1.6.0.9

digium asterisk 1.6.0.6

digium asterisk 1.6.0.15

digium asterisk 1.6.0.17

digium asterisk 1.6.1.10

digium asterisk 1.6.1.16

digium asterisk 1.6.0.3

digium asterisk 1.6.0.4

digium asterisk 1.6.2.16

digium asterisk 1.6.2.17

digium asterisk 1.6.2.17.1

digium asterisk 1.6.1.7

digium asterisk 1.6.0.10

digium asterisk 1.6.0.20

digium asterisk 1.6.0.14

digium asterisk 1.6.1.14

digium asterisk 1.6.1.23

digium asterisk 1.6.1.15

digium asterisk 1.6.2.16.1

digium asterisk 1.6.2.1

digium asterisk 1.6.2.2

digium asterisk 1.6.2.17.2

digium asterisk 1.6.2.18

digium asterisk 1.6.0.1

digium asterisk 1.6.1.1

digium asterisk 1.6.1.6

digium asterisk 1.6.0.24

digium asterisk 1.6.0.25

digium asterisk 1.6.1.17

digium asterisk 1.6.0.7

digium asterisk 1.6.0.22

digium asterisk 1.6.0.19

digium asterisk 1.6.0.12

digium asterisk 1.6.1.11

digium asterisk 1.6.1.21

digium asterisk 1.6.0.2

digium asterisk 1.6.2.15

digium asterisk 1.6.2.5

digium asterisk 1.6.2.17.3

digium asterisk 1.8.1.2

digium asterisk 1.8.1.1

digium asterisk 1.8.0

digium asterisk 1.8.4

digium asterisk 1.8.2.3

digium asterisk 1.8.3

digium asterisk 1.8.4.1

digium asterisk 1.8.1

digium asterisk 1.8.4.2

digium asterisk 1.8.3.1

digium asterisk 1.8.3.3

digium asterisk 1.8.2.2

digium asterisk 1.8.2.1

digium asterisk 1.8.2

digium asterisk 1.8.3.2

digium asterisk 1.8.2.4

Vendor Advisories

Debian CVElist Bug Report Logs: asterisk: AST-2011-010 (CVE-2011-2535) - crash due to using remote pointers
Debian Bug report logs - #631448 asterisk: AST-2011-010 (CVE-2011-2535) - crash due to using remote pointers Package: asterisk; Maintainer for asterisk is Debian VoIP Team <pkg-voip-maintainers@listsaliothdebianorg>; Source for asterisk is src:asterisk (PTS, buildd, popcon) Reported by: Tzafrir Cohen <tzafrir@debianor ...
Debian CVElist Bug Report Logs: asterisk: AST-2011-011 (CVE-2011-2536) Possible enumeration of SIP users
Debian Bug report logs - #632029 asterisk: AST-2011-011 (CVE-2011-2536) Possible enumeration of SIP users Package: asterisk; Maintainer for asterisk is Debian VoIP Team <pkg-voip-maintainers@listsaliothdebianorg>; Source for asterisk is src:asterisk (PTS, buildd, popcon) Reported by: Tzafrir Cohen <tzafrir@debianorg&g ...
Debian CVElist Bug Report Logs: asterisk; AST-2011-009 - crash on malformed SIP packet
Debian Bug report logs - #631445 asterisk; AST-2011-009 - crash on malformed SIP packet Package: asterisk; Maintainer for asterisk is Debian VoIP Team <pkg-voip-maintainers@listsaliothdebianorg>; Source for asterisk is src:asterisk (PTS, buildd, popcon) Reported by: Tzafrir Cohen <tzafrir@debianorg> Date: Thu, 23 ...
Debian CVElist Bug Report Logs: asterisk: AST-2011-008 (CVE-2011-2529) - remote unauthenticated (null character)
Debian Bug report logs - #631446 asterisk: AST-2011-008 (CVE-2011-2529) - remote unauthenticated (null character) Package: asterisk; Maintainer for asterisk is Debian VoIP Team <pkg-voip-maintainers@listsaliothdebianorg>; Source for asterisk is src:asterisk (PTS, buildd, popcon) Reported by: Tzafrir Cohen <tzafrir@debi ...

References

CWE-119http://securitytracker.com/id?1025706http://downloads.asterisk.org/pub/security/AST-2011-008.diffhttp://secunia.com/advisories/45048http://www.securityfocus.com/bid/48431http://downloads.asterisk.org/pub/security/AST-2011-008.htmlhttp://www.osvdb.org/73307http://www.debian.org/security/2011/dsa-2276http://secunia.com/advisories/45201http://secunia.com/advisories/45239http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.htmlhttps://exchange.xforce.ibmcloud.com/vulnerabilities/68203https://nvd.nist.govhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631448
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook