CVE-2011-2535

Asterisk 1.4.x < 1.4.41.1, 1.6.2.x < 1.6.2.18.1, 1.8.x < 1.8.4.3, C.3 < C.3.7.3 - DoS via IAX2 Option Control Frame

Title source: llm
STIX 2.1

Description

chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted frame.

References (12)

Core 12
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/44973
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/68205
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/48431
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025708
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45239
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2276
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45048
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/73309
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/45201

Scores

EPSS 0.0461
EPSS Percentile 90.6%

Details

CWE
CWE-20
Status published
Products (24)
digium/asterisk 1.8.0 (10 CPE variants)
digium/asterisk 1.8.1 (2 CPE variants)
digium/asterisk 1.8.1.1
digium/asterisk 1.8.1.2
digium/asterisk 1.8.2
digium/asterisk 1.8.2.1
digium/asterisk 1.8.2.2
digium/asterisk 1.8.2.3
digium/asterisk 1.8.2.4
digium/asterisk 1.8.3 (4 CPE variants)
... and 14 more
Published Jul 06, 2011
Tracked Since Feb 18, 2026