5

CVE-2011-2665

reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a SIP packet with a Contact header that lacks a < (less than) character.

Data is provided by the National Vulnerability Database (NVD)
Digium ≫ Asterisk Version1.8.0
Digium ≫ Asterisk Version1.8.0 Updatebeta1
Digium ≫ Asterisk Version1.8.0 Updatebeta2
Digium ≫ Asterisk Version1.8.0 Updatebeta3
Digium ≫ Asterisk Version1.8.0 Updatebeta4
Digium ≫ Asterisk Version1.8.0 Updatebeta5
Digium ≫ Asterisk Version1.8.0 Updaterc2
Digium ≫ Asterisk Version1.8.0 Updaterc3
Digium ≫ Asterisk Version1.8.0 Updaterc4
Digium ≫ Asterisk Version1.8.0 Updaterc5
Digium ≫ Asterisk Version1.8.1
Digium ≫ Asterisk Version1.8.1 Updaterc1
Digium ≫ Asterisk Version1.8.1.1
Digium ≫ Asterisk Version1.8.1.2
Digium ≫ Asterisk Version1.8.2
Digium ≫ Asterisk Version1.8.2.1
Digium ≫ Asterisk Version1.8.2.2
Digium ≫ Asterisk Version1.8.2.3
Digium ≫ Asterisk Version1.8.2.4
Digium ≫ Asterisk Version1.8.3
Digium ≫ Asterisk Version1.8.3 Updaterc1
Digium ≫ Asterisk Version1.8.3 Updaterc2
Digium ≫ Asterisk Version1.8.3 Updaterc3
Digium ≫ Asterisk Version1.8.3.1
Digium ≫ Asterisk Version1.8.3.2
Digium ≫ Asterisk Version1.8.3.3
Digium ≫ Asterisk Version1.8.4
Digium ≫ Asterisk Version1.8.4 Updaterc1
Digium ≫ Asterisk Version1.8.4 Updaterc2
Digium ≫ Asterisk Version1.8.4 Updaterc3
Digium ≫ Asterisk Version1.8.4.1
Digium ≫ Asterisk Version1.8.4.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 2.32% 0.833
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P