CVE-2011-1147

Asterisk < 1.4.39.2, 1.6.1.22, 1.6.2.16.2, 1.8.2.4 - Remote Code Execution via UDPTL

Title source: llm
STIX 2.1

Description

Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet.

References (12)

Core 12
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43702
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46474
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2225
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43429
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0635
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/03/11/2
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1025101
Mailing List mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/03/11/8

Scores

EPSS 0.0352
EPSS Percentile 87.9%

Details

CWE
CWE-119
Status published
Products (29)
digium/asterisk 1.4.0 (5 CPE variants)
digium/asterisk 1.4.1
digium/asterisk 1.4.2
digium/asterisk 1.4.3
digium/asterisk 1.4.10
digium/asterisk 1.4.10.1
digium/asterisk 1.4.11
digium/asterisk 1.4.12
digium/asterisk 1.4.12.1
digium/asterisk 1.4.13
... and 19 more
Published Mar 15, 2011
Tracked Since Feb 18, 2026