CVE-2011-1175

Published: Mar 31, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by establishing many short TCP sessions to services that use a certain TLS API.

Affected (94)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.6.1.0
Digium Asterisk	Version 1.6.1.0 rc2
Digium Asterisk	Version 1.6.1.0 rc3
Digium Asterisk	Version 1.6.1.0 rc4
Digium Asterisk	Version 1.6.1.0 rc5
Digium Asterisk	Version 1.6.1.10
Digium Asterisk	Version 1.6.1.10 rc1
Digium Asterisk	Version 1.6.1.10 rc2
Digium Asterisk	Version 1.6.1.10 rc3
Digium Asterisk	Version 1.6.1.11
Digium Asterisk	Version 1.6.1.12
Digium Asterisk	Version 1.6.1.12 rc1
Digium Asterisk	Version 1.6.1.13
Digium Asterisk	Version 1.6.1.13 rc1
Digium Asterisk	Version 1.6.1.14
Digium Asterisk	Version 1.6.1.15 rc2
Digium Asterisk	Version 1.6.1.16
Digium Asterisk	Version 1.6.1.17
Digium Asterisk	Version 1.6.1.18
Digium Asterisk	Version 1.6.1.18 rc1
Digium Asterisk	Version 1.6.1.18 rc2
Digium Asterisk	Version 1.6.1.19
Digium Asterisk	Version 1.6.1.19 rc1
Digium Asterisk	Version 1.6.1.19 rc2
Digium Asterisk	Version 1.6.1.19 rc3
Digium Asterisk	Version 1.6.1.1
Digium Asterisk	Version 1.6.1.20
Digium Asterisk	Version 1.6.1.20 rc1
Digium Asterisk	Version 1.6.1.20 rc2
Digium Asterisk	Version 1.6.1.21
Digium Asterisk	Version 1.6.1.22
Digium Asterisk	Version 1.6.1.2
Digium Asterisk	Version 1.6.1.3 rc1
Digium Asterisk	Version 1.6.1.4
Digium Asterisk	Version 1.6.1.5
Digium Asterisk	Version 1.6.1.5 rc1
Digium Asterisk	Version 1.6.1.6
Digium Asterisk	Version 1.6.1.7 rc1
Digium Asterisk	Version 1.6.1.7 rc2
Digium Asterisk	Version 1.6.1.8
Digium Asterisk	Version 1.6.1.9
Digium Asterisk	Version 1.6.1
Digium Asterisk	Version 1.6.1 beta1
Digium Asterisk	Version 1.6.1 beta2
Digium Asterisk	Version 1.6.1 beta3
Digium Asterisk	Version 1.6.1 beta4
Digium Asterisk	Version 1.6.1 rc1

Configuration B

25 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.6.2.0
Digium Asterisk	Version 1.6.2.0 rc2
Digium Asterisk	Version 1.6.2.0 rc3
Digium Asterisk	Version 1.6.2.0 rc4
Digium Asterisk	Version 1.6.2.0 rc5
Digium Asterisk	Version 1.6.2.0 rc6
Digium Asterisk	Version 1.6.2.0 rc7
Digium Asterisk	Version 1.6.2.0 rc8
Digium Asterisk	Version 1.6.2.15 rc1
Digium Asterisk	Version 1.6.2.16.1
Digium Asterisk	Version 1.6.2.16
Digium Asterisk	Version 1.6.2.16 rc1
Digium Asterisk	Version 1.6.2.17
Digium Asterisk	Version 1.6.2.17 rc1
Digium Asterisk	Version 1.6.2.17 rc2
Digium Asterisk	Version 1.6.2.17 rc3
Digium Asterisk	Version 1.6.2.1
Digium Asterisk	Version 1.6.2.1 rc1
Digium Asterisk	Version 1.6.2.2
Digium Asterisk	Version 1.6.2.3 rc2
Digium Asterisk	Version 1.6.2.4
Digium Asterisk	Version 1.6.2.5
Digium Asterisk	Version 1.6.2.6
Digium Asterisk	Version 1.6.2.6 rc1
Digium Asterisk	Version 1.6.2.6 rc2

Configuration C

22 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.8.0
Digium Asterisk	Version 1.8.0 beta1
Digium Asterisk	Version 1.8.0 beta2
Digium Asterisk	Version 1.8.0 beta3
Digium Asterisk	Version 1.8.0 beta4
Digium Asterisk	Version 1.8.0 beta5
Digium Asterisk	Version 1.8.0 rc2
Digium Asterisk	Version 1.8.0 rc3
Digium Asterisk	Version 1.8.0 rc4
Digium Asterisk	Version 1.8.0 rc5
Digium Asterisk	Version 1.8.1.1
Digium Asterisk	Version 1.8.1.2
Digium Asterisk	Version 1.8.1
Digium Asterisk	Version 1.8.1 rc1
Digium Asterisk	Version 1.8.2.1
Digium Asterisk	Version 1.8.2.2
Digium Asterisk	Version 1.8.2.3
Digium Asterisk	Version 1.8.2
Digium Asterisk	Version 1.8.3
Digium Asterisk	Version 1.8.3 rc1
Digium Asterisk	Version 1.8.3 rc2
Digium Asterisk	Version 1.8.3 rc3