CVE-2011-4598

Asterisk 1.6.2.x < 1.6.2.21 and 1.8.x < 1.8.7.2 - Denial of Service via SIP Request Handling

Title source: llm
STIX 2.1

Description

The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted sequence of SIP requests.

References (6)

Core 6
Core References
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/12/09/4
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/12/09/3
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47273
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/77598
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2011/dsa-2367

Scores

EPSS 0.0244
EPSS Percentile 82.4%

Details

CWE
CWE-200
Status published
Products (24)
digium/asterisk 1.8.0 (10 CPE variants)
digium/asterisk 1.8.1 (2 CPE variants)
digium/asterisk 1.8.1.1
digium/asterisk 1.8.1.2
digium/asterisk 1.8.2
digium/asterisk 1.8.2.1
digium/asterisk 1.8.2.2
digium/asterisk 1.8.2.3
digium/asterisk 1.8.2.4
digium/asterisk 1.8.3 (4 CPE variants)
... and 14 more
Published Dec 15, 2011
Tracked Since Feb 18, 2026