AST-2011-012: Remote crash vulnerability in SIP channel driver

🗓️ 24 Oct 2011 00:00:00Reported by SecurityvulnsType

Remote crash vulnerability in SIP channel driver. Remote authenticated user can cause a crash with a malformed request due to an uninitialized variable. Ensure variables are initialized in all cases when parsing the request. Affected versions: 1.8.x, 10.x. Corrected in: 1.8.7.1, 10.0.0-rc1

Reporter	Title	Published	Views	Family All 29
Tenable Nessus	Asterisk Remote Crash Vulnerability in SIP Channel Driver (AST-2011-012)	19 Oct 201100:00	–	nessus
Tenable Nessus	Asterisk SIP Channel Driver Uninitialized Variable Request Parsing DoS (AST-2011-012)	22 Nov 201100:00	–	nessus
Tenable Nessus	Fedora 16 : asterisk-1.8.7.1-1.fc16 (2011-14480)	14 Nov 201100:00	–	nessus
Tenable Nessus	Fedora 15 : asterisk-1.8.7.1-1.fc15 (2011-14538)	14 Nov 201100:00	–	nessus
Tenable Nessus	FreeBSD : asterisk -- remote crash vulnerability in SIP channel driver (a95092a6-f8f1-11e0-a7ea-00215c6a37bb)	18 Oct 201100:00	–	nessus
Tenable Nessus	GLSA-201110-21 : Asterisk: Multiple vulnerabilities	25 Oct 201100:00	–	nessus
FreeBSD	asterisk -- remote crash vulnerability in SIP channel driver	17 Oct 201100:00	–	freebsd
Check Point Advisories	Digium Asterisk SIP Channel Driver Denial Of Service (CVE-2011-4063)	12 Jan 201200:00	–	checkpoint_advisories
Check Point Advisories	Digium Asterisk SIP Channel Driver Denial Of Service - High Confidence (CVE-2011-4063)	18 Mar 201300:00	–	checkpoint_advisories
CVE	CVE-2011-4063	21 Oct 201110:00	–	cve

24 Oct 2011 00:00Current

0.9Low risk

Vulners AI Score0.9

EPSS0.06434