cbcvebase.
CVE-2011-4598
published 2011-12-15

CVE-2011-4598: The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled…

PriorityP418medium4.3CVSS 2.0
AVNACMAuNCNINAP
EPSS
2.44%
82.3th percentile
The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted sequence of SIP requests.

Affected

44 ranges· showing 25
VendorProductVersion rangeFixed in
debianasterisk< asterisk 1:1.8.8.0~dfsg-1 (bullseye)asterisk 1:1.8.8.0~dfsg-1 (bullseye)
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——
digiumasterisk——

CVSS provenance

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv4.3MEDIUM
vendor_debian4.3MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.