Lucene search
HistoryDec 15, 2011 - 3:57 a.m.
CVE-2011-4598
cve-2011-4598
asterisk
open source
denial of service
sip
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.042 Low
EPSS
Percentile
92.3%
The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted sequence of SIP requests.
Affected configurations
Node
digiumasteriskMatch1.8.0
ORdigiumasteriskMatch1.8.0beta1
ORdigiumasteriskMatch1.8.0beta2
ORdigiumasteriskMatch1.8.0beta3
ORdigiumasteriskMatch1.8.0beta4
ORdigiumasteriskMatch1.8.0beta5
ORdigiumasteriskMatch1.8.0rc2
ORdigiumasteriskMatch1.8.0rc3
ORdigiumasteriskMatch1.8.0rc4
ORdigiumasteriskMatch1.8.0rc5
ORdigiumasteriskMatch1.8.1
ORdigiumasteriskMatch1.8.1rc1
ORdigiumasteriskMatch1.8.1.1
ORdigiumasteriskMatch1.8.1.2
ORdigiumasteriskMatch1.8.2
ORdigiumasteriskMatch1.8.2.1
ORdigiumasteriskMatch1.8.2.2
ORdigiumasteriskMatch1.8.2.3
ORdigiumasteriskMatch1.8.2.4
ORdigiumasteriskMatch1.8.3
ORdigiumasteriskMatch1.8.3rc1
ORdigiumasteriskMatch1.8.3rc2
ORdigiumasteriskMatch1.8.3rc3
ORdigiumasteriskMatch1.8.3.1
ORdigiumasteriskMatch1.8.3.2
ORdigiumasteriskMatch1.8.3.3
ORdigiumasteriskMatch1.8.4
ORdigiumasteriskMatch1.8.4rc1
ORdigiumasteriskMatch1.8.4rc2
ORdigiumasteriskMatch1.8.4rc3
ORdigiumasteriskMatch1.8.4.1
ORdigiumasteriskMatch1.8.4.2
ORdigiumasteriskMatch1.8.4.3
ORdigiumasteriskMatch1.8.4.4
ORdigiumasteriskMatch1.8.5
ORdigiumasteriskMatch1.8.5rc1
ORdigiumasteriskMatch1.8.5.0
ORdigiumasteriskMatch1.8.6.0
ORdigiumasteriskMatch1.8.6.0rc1
ORdigiumasteriskMatch1.8.6.0rc2
ORdigiumasteriskMatch1.8.6.0rc3
ORdigiumasteriskMatch1.8.7.0
ORdigiumasteriskMatch1.8.7.0rc1
ORdigiumasteriskMatch1.8.7.0rc2
ORdigiumasteriskMatch1.8.7.1
Node
digiumasteriskMatch1.6.2.0
ORdigiumasteriskMatch1.6.2.0rc2
ORdigiumasteriskMatch1.6.2.0rc3
ORdigiumasteriskMatch1.6.2.0rc4
ORdigiumasteriskMatch1.6.2.0rc5
ORdigiumasteriskMatch1.6.2.0rc6
ORdigiumasteriskMatch1.6.2.0rc7
ORdigiumasteriskMatch1.6.2.0rc8
ORdigiumasteriskMatch1.6.2.1
ORdigiumasteriskMatch1.6.2.1rc1
ORdigiumasteriskMatch1.6.2.2
ORdigiumasteriskMatch1.6.2.3rc2
ORdigiumasteriskMatch1.6.2.4
ORdigiumasteriskMatch1.6.2.5
ORdigiumasteriskMatch1.6.2.6
ORdigiumasteriskMatch1.6.2.6rc1
ORdigiumasteriskMatch1.6.2.6rc2
ORdigiumasteriskMatch1.6.2.15rc1
ORdigiumasteriskMatch1.6.2.16
ORdigiumasteriskMatch1.6.2.16rc1
ORdigiumasteriskMatch1.6.2.16.1
ORdigiumasteriskMatch1.6.2.16.2
ORdigiumasteriskMatch1.6.2.17
ORdigiumasteriskMatch1.6.2.17rc1
ORdigiumasteriskMatch1.6.2.17rc2
ORdigiumasteriskMatch1.6.2.17rc3
ORdigiumasteriskMatch1.6.2.17.1
ORdigiumasteriskMatch1.6.2.17.2
ORdigiumasteriskMatch1.6.2.17.3
ORdigiumasteriskMatch1.6.2.18
ORdigiumasteriskMatch1.6.2.18rc1
ORdigiumasteriskMatch1.6.2.19
ORdigiumasteriskMatch1.6.2.19rc1
ORdigiumasteriskMatch1.6.2.20
ORdigiumasteriskMatch1.6.2.21
Related
prion
prion
Null pointer dereference
2011-12-15 03:57:00
ubuntucve
ubuntucve
CVE-2011-4598
2011-12-15 00:00:00
debiancve
debiancve
CVE-2011-4598
2011-12-15 03:57:34
nvd
nvd
CVE-2011-4598
2011-12-15 03:57:34
cvelist
cvelist
CVE-2011-4598
2011-12-15 02:00:00
nessus
nessus
Debian DSA-2367-1 : asterisk - several vulnerabilities
2012-01-12 00:00:00
FreeBSD : asterisk -- Multiple Vulnerabilities (bb389137-21fb-11e1-89b4-001ec9578670)
2011-12-09 00:00:00
Asterisk Multiple Vulnerabilities (AST-2011-013 / AST-2011-014)
2011-12-14 00:00:00
openvas
openvas
Debian Security Advisory DSA 2367-1 (asterisk)
2012-02-11 00:00:00
FreeBSD Ports: asterisk18
2012-02-13 00:00:00
Debian: Security Advisory (DSA-2367-1)
2012-02-11 00:00:00
osv
osv
asterisk - several
2011-12-19 00:00:00
debian
debian
[SECURITY] [DSA 2367-1] asterisk security update
2011-12-19 18:07:53
freebsd
freebsd
asterisk -- Multiple Vulnerabilities
2011-12-08 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: asterisk-1.8.10.1-1.fc15
2012-03-31 03:10:13
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:N/I:N/A:P
6.3 Medium
AI Score
Confidence
Low
0.042 Low
EPSS
Percentile
92.3%
Related for CVE-2011-4598