CVE-2011-1174

Published: Mar 31, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data.

Affected (97)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

48 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.6.1.0
Digium Asterisk	Version 1.6.1.0 rc2
Digium Asterisk	Version 1.6.1.0 rc3
Digium Asterisk	Version 1.6.1.0 rc4
Digium Asterisk	Version 1.6.1.0 rc5
Digium Asterisk	Version 1.6.1.10
Digium Asterisk	Version 1.6.1.10 rc1
Digium Asterisk	Version 1.6.1.10 rc2
Digium Asterisk	Version 1.6.1.10 rc3
Digium Asterisk	Version 1.6.1.11
Digium Asterisk	Version 1.6.1.12
Digium Asterisk	Version 1.6.1.12 rc1
Digium Asterisk	Version 1.6.1.13
Digium Asterisk	Version 1.6.1.13 rc1
Digium Asterisk	Version 1.6.1.14
Digium Asterisk	Version 1.6.1.15 rc2
Digium Asterisk	Version 1.6.1.16
Digium Asterisk	Version 1.6.1.17
Digium Asterisk	Version 1.6.1.18
Digium Asterisk	Version 1.6.1.18 rc1
Digium Asterisk	Version 1.6.1.18 rc2
Digium Asterisk	Version 1.6.1.19
Digium Asterisk	Version 1.6.1.19 rc1
Digium Asterisk	Version 1.6.1.19 rc2
Digium Asterisk	Version 1.6.1.19 rc3
Digium Asterisk	Version 1.6.1.1
Digium Asterisk	Version 1.6.1.20
Digium Asterisk	Version 1.6.1.20 rc1
Digium Asterisk	Version 1.6.1.20 rc2
Digium Asterisk	Version 1.6.1.21
Digium Asterisk	Version 1.6.1.22
Digium Asterisk	Version 1.6.1.23
Digium Asterisk	Version 1.6.1.2
Digium Asterisk	Version 1.6.1.3 rc1
Digium Asterisk	Version 1.6.1.4
Digium Asterisk	Version 1.6.1.5
Digium Asterisk	Version 1.6.1.5 rc1
Digium Asterisk	Version 1.6.1.6
Digium Asterisk	Version 1.6.1.7 rc1
Digium Asterisk	Version 1.6.1.7 rc2
Digium Asterisk	Version 1.6.1.8
Digium Asterisk	Version 1.6.1.9
Digium Asterisk	Version 1.6.1
Digium Asterisk	Version 1.6.1 beta1
Digium Asterisk	Version 1.6.1 beta2
Digium Asterisk	Version 1.6.1 beta3
Digium Asterisk	Version 1.6.1 beta4
Digium Asterisk	Version 1.6.1 rc1

Configuration B

26 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.6.2.0
Digium Asterisk	Version 1.6.2.0 rc2
Digium Asterisk	Version 1.6.2.0 rc3
Digium Asterisk	Version 1.6.2.0 rc4
Digium Asterisk	Version 1.6.2.0 rc5
Digium Asterisk	Version 1.6.2.0 rc6
Digium Asterisk	Version 1.6.2.0 rc7
Digium Asterisk	Version 1.6.2.0 rc8
Digium Asterisk	Version 1.6.2.15 rc1
Digium Asterisk	Version 1.6.2.16.1
Digium Asterisk	Version 1.6.2.16
Digium Asterisk	Version 1.6.2.16 rc1
Digium Asterisk	Version 1.6.2.17.1
Digium Asterisk	Version 1.6.2.17
Digium Asterisk	Version 1.6.2.17 rc1
Digium Asterisk	Version 1.6.2.17 rc2
Digium Asterisk	Version 1.6.2.17 rc3
Digium Asterisk	Version 1.6.2.1
Digium Asterisk	Version 1.6.2.1 rc1
Digium Asterisk	Version 1.6.2.2
Digium Asterisk	Version 1.6.2.3 rc2
Digium Asterisk	Version 1.6.2.4
Digium Asterisk	Version 1.6.2.5
Digium Asterisk	Version 1.6.2.6
Digium Asterisk	Version 1.6.2.6 rc1
Digium Asterisk	Version 1.6.2.6 rc2

Configuration C

23 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.8.0
Digium Asterisk	Version 1.8.0 beta1
Digium Asterisk	Version 1.8.0 beta2
Digium Asterisk	Version 1.8.0 beta3
Digium Asterisk	Version 1.8.0 beta4
Digium Asterisk	Version 1.8.0 beta5
Digium Asterisk	Version 1.8.0 rc2
Digium Asterisk	Version 1.8.0 rc3
Digium Asterisk	Version 1.8.0 rc4
Digium Asterisk	Version 1.8.0 rc5
Digium Asterisk	Version 1.8.1.1
Digium Asterisk	Version 1.8.1.2
Digium Asterisk	Version 1.8.1
Digium Asterisk	Version 1.8.1 rc1
Digium Asterisk	Version 1.8.2.1
Digium Asterisk	Version 1.8.2.2
Digium Asterisk	Version 1.8.2.3
Digium Asterisk	Version 1.8.2
Digium Asterisk	Version 1.8.3.1
Digium Asterisk	Version 1.8.3
Digium Asterisk	Version 1.8.3 rc1
Digium Asterisk	Version 1.8.3 rc2
Digium Asterisk	Version 1.8.3 rc3