5

CVE-2011-2216

reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed Contact header.

Data is provided by the National Vulnerability Database (NVD)
Digium ≫ Asterisk Version1.8.0
Digium ≫ Asterisk Version1.8.0 Updatebeta1
Digium ≫ Asterisk Version1.8.0 Updatebeta2
Digium ≫ Asterisk Version1.8.0 Updatebeta3
Digium ≫ Asterisk Version1.8.0 Updatebeta4
Digium ≫ Asterisk Version1.8.0 Updatebeta5
Digium ≫ Asterisk Version1.8.0 Updaterc2
Digium ≫ Asterisk Version1.8.0 Updaterc3
Digium ≫ Asterisk Version1.8.0 Updaterc4
Digium ≫ Asterisk Version1.8.0 Updaterc5
Digium ≫ Asterisk Version1.8.1
Digium ≫ Asterisk Version1.8.1 Updaterc1
Digium ≫ Asterisk Version1.8.1.1
Digium ≫ Asterisk Version1.8.1.2
Digium ≫ Asterisk Version1.8.2
Digium ≫ Asterisk Version1.8.2.1
Digium ≫ Asterisk Version1.8.2.2
Digium ≫ Asterisk Version1.8.2.3
Digium ≫ Asterisk Version1.8.2.4
Digium ≫ Asterisk Version1.8.3
Digium ≫ Asterisk Version1.8.3 Updaterc1
Digium ≫ Asterisk Version1.8.3 Updaterc2
Digium ≫ Asterisk Version1.8.3 Updaterc3
Digium ≫ Asterisk Version1.8.3.1
Digium ≫ Asterisk Version1.8.3.2
Digium ≫ Asterisk Version1.8.3.3
Digium ≫ Asterisk Version1.8.4
Digium ≫ Asterisk Version1.8.4 Updaterc1
Digium ≫ Asterisk Version1.8.4 Updaterc2
Digium ≫ Asterisk Version1.8.4 Updaterc3
Digium ≫ Asterisk Version1.8.4.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 3.5% 0.865
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P