5
CVSSv2

CVE-2011-2665

Published: 06/07/2011 Updated: 07/09/2011
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x prior to 1.8.4.3 allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a SIP packet with a Contact header that lacks a < (less than) character.

Vulnerable Product Search on Vulmon Subscribe to Product

digium asterisk 1.8.4

digium asterisk 1.8.1

digium asterisk 1.8.0

digium asterisk 1.8.1.1

digium asterisk 1.8.2.3

digium asterisk 1.8.3

digium asterisk 1.8.3.2

digium asterisk 1.8.2.2

digium asterisk 1.8.2.1

digium asterisk 1.8.3.1

digium asterisk 1.8.2.4

digium asterisk 1.8.4.1

digium asterisk 1.8.3.3

digium asterisk 1.8.2

digium asterisk 1.8.1.2

digium asterisk 1.8.4.2