CVE-2011-1147

Published: Mar 15, 2011Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet.

Affected (203)

Products: Digium: Asterisk, Asterisknow, S800i

3 products

Configuration A

107 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.4.0
Digium Asterisk	Version 1.4.0 beta1
Digium Asterisk	Version 1.4.0 beta2
Digium Asterisk	Version 1.4.0 beta3
Digium Asterisk	Version 1.4.0 beta4
Digium Asterisk	Version 1.4.10.1
Digium Asterisk	Version 1.4.10
Digium Asterisk	Version 1.4.11
Digium Asterisk	Version 1.4.12.1
Digium Asterisk	Version 1.4.12
Digium Asterisk	Version 1.4.13
Digium Asterisk	Version 1.4.14
Digium Asterisk	Version 1.4.15
Digium Asterisk	Version 1.4.16.1
Digium Asterisk	Version 1.4.16.2
Digium Asterisk	Version 1.4.16
Digium Asterisk	Version 1.4.17
Digium Asterisk	Version 1.4.18
Digium Asterisk	Version 1.4.19.1
Digium Asterisk	Version 1.4.19.2
Digium Asterisk	Version 1.4.19
Digium Asterisk	Version 1.4.19 rc1
Digium Asterisk	Version 1.4.19 rc2
Digium Asterisk	Version 1.4.19 rc3
Digium Asterisk	Version 1.4.19 rc4
Digium Asterisk	Version 1.4.1
Digium Asterisk	Version 1.4.20.1
Digium Asterisk	Version 1.4.20
Digium Asterisk	Version 1.4.20 rc1
Digium Asterisk	Version 1.4.20 rc2
Digium Asterisk	Version 1.4.20 rc3
Digium Asterisk	Version 1.4.21.1
Digium Asterisk	Version 1.4.21.2
Digium Asterisk	Version 1.4.21
Digium Asterisk	Version 1.4.21 rc1
Digium Asterisk	Version 1.4.21 rc2
Digium Asterisk	Version 1.4.22.1
Digium Asterisk	Version 1.4.22.2
Digium Asterisk	Version 1.4.22
Digium Asterisk	Version 1.4.22 rc1
Digium Asterisk	Version 1.4.22 rc2
Digium Asterisk	Version 1.4.22 rc3
Digium Asterisk	Version 1.4.22 rc4
Digium Asterisk	Version 1.4.22 rc5
Digium Asterisk	Version 1.4.23.1
Digium Asterisk	Version 1.4.23.2
Digium Asterisk	Version 1.4.23
Digium Asterisk	Version 1.4.23 rc1
Digium Asterisk	Version 1.4.23 rc2
Digium Asterisk	Version 1.4.23 rc3
Digium Asterisk	Version 1.4.23 rc4
Digium Asterisk	Version 1.4.24.1
Digium Asterisk	Version 1.4.24
Digium Asterisk	Version 1.4.24 rc1
Digium Asterisk	Version 1.4.25.1
Digium Asterisk	Version 1.4.25
Digium Asterisk	Version 1.4.25 rc1
Digium Asterisk	Version 1.4.26.1
Digium Asterisk	Version 1.4.26.2
Digium Asterisk	Version 1.4.26.3
Digium Asterisk	Version 1.4.26
Digium Asterisk	Version 1.4.26 rc1
Digium Asterisk	Version 1.4.26 rc2
Digium Asterisk	Version 1.4.26 rc3
Digium Asterisk	Version 1.4.26 rc4
Digium Asterisk	Version 1.4.26 rc5
Digium Asterisk	Version 1.4.26 rc6
Digium Asterisk	Version 1.4.27.1
Digium Asterisk	Version 1.4.27
Digium Asterisk	Version 1.4.27 rc1
Digium Asterisk	Version 1.4.27 rc2
Digium Asterisk	Version 1.4.27 rc3
Digium Asterisk	Version 1.4.27 rc4
Digium Asterisk	Version 1.4.27 rc5
Digium Asterisk	Version 1.4.28
Digium Asterisk	Version 1.4.28 rc1
Digium Asterisk	Version 1.4.29.1
Digium Asterisk	Version 1.4.29
Digium Asterisk	Version 1.4.29 rc1
Digium Asterisk	Version 1.4.2
Digium Asterisk	Version 1.4.30
Digium Asterisk	Version 1.4.30 rc2
Digium Asterisk	Version 1.4.30 rc3
Digium Asterisk	Version 1.4.31
Digium Asterisk	Version 1.4.31 rc1
Digium Asterisk	Version 1.4.31 rc2
Digium Asterisk	Version 1.4.32
Digium Asterisk	Version 1.4.32 rc1
Digium Asterisk	Version 1.4.33.1
Digium Asterisk	Version 1.4.33
Digium Asterisk	Version 1.4.33 rc1
Digium Asterisk	Version 1.4.33 rc2
Digium Asterisk	Version 1.4.34
Digium Asterisk	Version 1.4.34 rc1
Digium Asterisk	Version 1.4.34 rc2
Digium Asterisk	Version 1.4.35
Digium Asterisk	Version 1.4.35 rc1
Digium Asterisk	Version 1.4.36
Digium Asterisk	Version 1.4.36 rc1
Digium Asterisk	Version 1.4.37
Digium Asterisk	Version 1.4.37 rc1
Digium Asterisk	Version 1.4.38
Digium Asterisk	Version 1.4.38 rc1
Digium Asterisk	Version 1.4.39.1
Digium Asterisk	Version 1.4.39
Digium Asterisk	Version 1.4.39 rc1
Digium Asterisk	Version 1.4.3

Configuration B

21 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.6.2.0
Digium Asterisk	Version 1.6.2.0 rc2
Digium Asterisk	Version 1.6.2.0 rc3
Digium Asterisk	Version 1.6.2.0 rc4
Digium Asterisk	Version 1.6.2.0 rc5
Digium Asterisk	Version 1.6.2.0 rc6
Digium Asterisk	Version 1.6.2.0 rc7
Digium Asterisk	Version 1.6.2.0 rc8
Digium Asterisk	Version 1.6.2.15 rc1
Digium Asterisk	Version 1.6.2.16.1
Digium Asterisk	Version 1.6.2.16
Digium Asterisk	Version 1.6.2.16 rc1
Digium Asterisk	Version 1.6.2.1
Digium Asterisk	Version 1.6.2.1 rc1
Digium Asterisk	Version 1.6.2.2
Digium Asterisk	Version 1.6.2.3 rc2
Digium Asterisk	Version 1.6.2.4
Digium Asterisk	Version 1.6.2.5
Digium Asterisk	Version 1.6.2.6
Digium Asterisk	Version 1.6.2.6 rc1
Digium Asterisk	Version 1.6.2.6 rc2

Configuration C

18 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.8.0
Digium Asterisk	Version 1.8.0 beta1
Digium Asterisk	Version 1.8.0 beta2
Digium Asterisk	Version 1.8.0 beta3
Digium Asterisk	Version 1.8.0 beta4
Digium Asterisk	Version 1.8.0 beta5
Digium Asterisk	Version 1.8.0 rc2
Digium Asterisk	Version 1.8.0 rc3
Digium Asterisk	Version 1.8.0 rc4
Digium Asterisk	Version 1.8.0 rc5
Digium Asterisk	Version 1.8.1.1
Digium Asterisk	Version 1.8.1.2
Digium Asterisk	Version 1.8.1
Digium Asterisk	Version 1.8.1 rc1
Digium Asterisk	Version 1.8.2.1
Digium Asterisk	Version 1.8.2.2
Digium Asterisk	Version 1.8.2.3
Digium Asterisk	Version 1.8.2

Configuration D

15 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version c.1.0 beta7
Digium Asterisk	Version c.1.0 beta8
Digium Asterisk	Version c.1.6.1
Digium Asterisk	Version c.1.6.2
Digium Asterisk	Version c.1.6
Digium Asterisk	Version c.1.8.0
Digium Asterisk	Version c.1.8.1
Digium Asterisk	Version c.2.3
Digium Asterisk	Version c.3.0
Digium Asterisk	Version c.3.1.0
Digium Asterisk	Version c.3.1.1
Digium Asterisk	Version c.3.2.2
Digium Asterisk	Version c.3.2.3
Digium Asterisk	Version c.3.3.2
Digium Asterisk	Version c.3.6.2

Configuration E

2 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisknow	Version 1.5
Digium S800i	All versions

Configuration F

40 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.6.1.0
Digium Asterisk	Version 1.6.1.0 rc2
Digium Asterisk	Version 1.6.1.0 rc3
Digium Asterisk	Version 1.6.1.0 rc4
Digium Asterisk	Version 1.6.1.0 rc5
Digium Asterisk	Version 1.6.1.10
Digium Asterisk	Version 1.6.1.10 rc1
Digium Asterisk	Version 1.6.1.10 rc2
Digium Asterisk	Version 1.6.1.10 rc3
Digium Asterisk	Version 1.6.1.11
Digium Asterisk	Version 1.6.1.12
Digium Asterisk	Version 1.6.1.12 rc1
Digium Asterisk	Version 1.6.1.13
Digium Asterisk	Version 1.6.1.13 rc1
Digium Asterisk	Version 1.6.1.14
Digium Asterisk	Version 1.6.1.15 rc2
Digium Asterisk	Version 1.6.1.16
Digium Asterisk	Version 1.6.1.17
Digium Asterisk	Version 1.6.1.18
Digium Asterisk	Version 1.6.1.18 rc1
Digium Asterisk	Version 1.6.1.18 rc2
Digium Asterisk	Version 1.6.1.19
Digium Asterisk	Version 1.6.1.19 rc1
Digium Asterisk	Version 1.6.1.19 rc2
Digium Asterisk	Version 1.6.1.19 rc3
Digium Asterisk	Version 1.6.1.1
Digium Asterisk	Version 1.6.1.20
Digium Asterisk	Version 1.6.1.20 rc1
Digium Asterisk	Version 1.6.1.20 rc2
Digium Asterisk	Version 1.6.1.21
Digium Asterisk	Version 1.6.1.2
Digium Asterisk	Version 1.6.1.3 rc1
Digium Asterisk	Version 1.6.1.4
Digium Asterisk	Version 1.6.1.5
Digium Asterisk	Version 1.6.1.5 rc1
Digium Asterisk	Version 1.6.1.6
Digium Asterisk	Version 1.6.1.7 rc1
Digium Asterisk	Version 1.6.1.7 rc2
Digium Asterisk	Version 1.6.1.8
Digium Asterisk	Version 1.6.1.9