CVE-2011-1175

EPSS 0.28%
Veröffentlicht 31.03.2011 22:55:03
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secalert@redhat.com
CVE-Watchlists
Login
Unerledigt
Login

tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by establishing many short TCP sessions to services that use a certain TLS API.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 16

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Digium ≫ Asterisk Version1.6.1

Digium ≫ Asterisk Version1.6.1 Updatebeta1

Digium ≫ Asterisk Version1.6.1 Updatebeta2

Digium ≫ Asterisk Version1.6.1 Updatebeta3

Digium ≫ Asterisk Version1.6.1 Updatebeta4

Digium ≫ Asterisk Version1.6.1 Updaterc1

Digium ≫ Asterisk Version1.6.1.0

Digium ≫ Asterisk Version1.6.1.0 Updaterc2

Digium ≫ Asterisk Version1.6.1.0 Updaterc3

Digium ≫ Asterisk Version1.6.1.0 Updaterc4

Digium ≫ Asterisk Version1.6.1.0 Updaterc5

Digium ≫ Asterisk Version1.6.1.1

Digium ≫ Asterisk Version1.6.1.2

Digium ≫ Asterisk Version1.6.1.3 Updaterc1

Digium ≫ Asterisk Version1.6.1.4

Digium ≫ Asterisk Version1.6.1.5

Digium ≫ Asterisk Version1.6.1.5 Updaterc1

Digium ≫ Asterisk Version1.6.1.6

Digium ≫ Asterisk Version1.6.1.7 Updaterc1

Digium ≫ Asterisk Version1.6.1.7 Updaterc2

Digium ≫ Asterisk Version1.6.1.8

Digium ≫ Asterisk Version1.6.1.9

Digium ≫ Asterisk Version1.6.1.10

Digium ≫ Asterisk Version1.6.1.10 Updaterc1

Digium ≫ Asterisk Version1.6.1.10 Updaterc2

Digium ≫ Asterisk Version1.6.1.10 Updaterc3

Digium ≫ Asterisk Version1.6.1.11

Digium ≫ Asterisk Version1.6.1.12

Digium ≫ Asterisk Version1.6.1.12 Updaterc1

Digium ≫ Asterisk Version1.6.1.13

Digium ≫ Asterisk Version1.6.1.13 Updaterc1

Digium ≫ Asterisk Version1.6.1.14

Digium ≫ Asterisk Version1.6.1.15 Updaterc2

Digium ≫ Asterisk Version1.6.1.16

Digium ≫ Asterisk Version1.6.1.17

Digium ≫ Asterisk Version1.6.1.18

Digium ≫ Asterisk Version1.6.1.18 Updaterc1

Digium ≫ Asterisk Version1.6.1.18 Updaterc2

Digium ≫ Asterisk Version1.6.1.19

Digium ≫ Asterisk Version1.6.1.19 Updaterc1

Digium ≫ Asterisk Version1.6.1.19 Updaterc2

Digium ≫ Asterisk Version1.6.1.19 Updaterc3

Digium ≫ Asterisk Version1.6.1.20

Digium ≫ Asterisk Version1.6.1.20 Updaterc1

Digium ≫ Asterisk Version1.6.1.20 Updaterc2

Digium ≫ Asterisk Version1.6.1.21

Digium ≫ Asterisk Version1.6.1.22

Digium ≫ Asterisk Version1.6.2.0

Digium ≫ Asterisk Version1.6.2.0 Updaterc2

Digium ≫ Asterisk Version1.6.2.0 Updaterc3

Digium ≫ Asterisk Version1.6.2.0 Updaterc4

Digium ≫ Asterisk Version1.6.2.0 Updaterc5

Digium ≫ Asterisk Version1.6.2.0 Updaterc6

Digium ≫ Asterisk Version1.6.2.0 Updaterc7

Digium ≫ Asterisk Version1.6.2.0 Updaterc8

Digium ≫ Asterisk Version1.6.2.1

Digium ≫ Asterisk Version1.6.2.1 Updaterc1

Digium ≫ Asterisk Version1.6.2.2

Digium ≫ Asterisk Version1.6.2.3 Updaterc2

Digium ≫ Asterisk Version1.6.2.4

Digium ≫ Asterisk Version1.6.2.5

Digium ≫ Asterisk Version1.6.2.6

Digium ≫ Asterisk Version1.6.2.6 Updaterc1

Digium ≫ Asterisk Version1.6.2.6 Updaterc2

Digium ≫ Asterisk Version1.6.2.15 Updaterc1

Digium ≫ Asterisk Version1.6.2.16

Digium ≫ Asterisk Version1.6.2.16 Updaterc1

Digium ≫ Asterisk Version1.6.2.16.1

Digium ≫ Asterisk Version1.6.2.17

Digium ≫ Asterisk Version1.6.2.17 Updaterc1

Digium ≫ Asterisk Version1.6.2.17 Updaterc2

Digium ≫ Asterisk Version1.6.2.17 Updaterc3

Digium ≫ Asterisk Version1.8.0

Digium ≫ Asterisk Version1.8.0 Updatebeta1

Digium ≫ Asterisk Version1.8.0 Updatebeta2

Digium ≫ Asterisk Version1.8.0 Updatebeta3

Digium ≫ Asterisk Version1.8.0 Updatebeta4

Digium ≫ Asterisk Version1.8.0 Updatebeta5

Digium ≫ Asterisk Version1.8.0 Updaterc2

Digium ≫ Asterisk Version1.8.0 Updaterc3

Digium ≫ Asterisk Version1.8.0 Updaterc4

Digium ≫ Asterisk Version1.8.0 Updaterc5

Digium ≫ Asterisk Version1.8.1

Digium ≫ Asterisk Version1.8.1 Updaterc1

Digium ≫ Asterisk Version1.8.1.1

Digium ≫ Asterisk Version1.8.1.2

Digium ≫ Asterisk Version1.8.2

Digium ≫ Asterisk Version1.8.2.1

Digium ≫ Asterisk Version1.8.2.2

Digium ≫ Asterisk Version1.8.2.3

Digium ≫ Asterisk Version1.8.3

Digium ≫ Asterisk Version1.8.3 Updaterc1

Digium ≫ Asterisk Version1.8.3 Updaterc2

Digium ≫ Asterisk Version1.8.3 Updaterc3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.28%	0.488

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

http://www.debian.org/security/2011/dsa-2225

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056945.html

Patch

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057156.html

http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057163.html

http://openwall.com/lists/oss-security/2011/03/17/5

http://openwall.com/lists/oss-security/2011/03/21/12

Patch

http://www.vupen.com/english/advisories/2011/0686

Vendor Advisory

http://www.vupen.com/english/advisories/2011/0790

Vendor Advisory

http://downloads.asterisk.org/pub/security/AST-2011-004.html

Patch

Vendor Advisory

http://securitytracker.com/id?1025224

http://www.securityfocus.com/bid/46898

https://bugzilla.redhat.com/show_bug.cgi?id=688678

https://exchange.xforce.ibmcloud.com/vulnerabilities/66140

https://nvd.nist.gov/vuln/detail/CVE-2011-1175

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2011-1175

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2011-1175

EUVD