CVE-2011-2665

Published: Jul 6, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a SIP packet with a Contact header that lacks a < (less than) character.

Affected (32)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.8.0
Digium Asterisk	Version 1.8.0 beta1
Digium Asterisk	Version 1.8.0 beta2
Digium Asterisk	Version 1.8.0 beta3
Digium Asterisk	Version 1.8.0 beta4
Digium Asterisk	Version 1.8.0 beta5
Digium Asterisk	Version 1.8.0 rc2
Digium Asterisk	Version 1.8.0 rc3
Digium Asterisk	Version 1.8.0 rc4
Digium Asterisk	Version 1.8.0 rc5
Digium Asterisk	Version 1.8.1.1
Digium Asterisk	Version 1.8.1.2
Digium Asterisk	Version 1.8.1
Digium Asterisk	Version 1.8.1 rc1
Digium Asterisk	Version 1.8.2.1
Digium Asterisk	Version 1.8.2.2
Digium Asterisk	Version 1.8.2.3
Digium Asterisk	Version 1.8.2.4
Digium Asterisk	Version 1.8.2
Digium Asterisk	Version 1.8.3.1
Digium Asterisk	Version 1.8.3.2
Digium Asterisk	Version 1.8.3.3
Digium Asterisk	Version 1.8.3
Digium Asterisk	Version 1.8.3 rc1
Digium Asterisk	Version 1.8.3 rc2
Digium Asterisk	Version 1.8.3 rc3
Digium Asterisk	Version 1.8.4.1
Digium Asterisk	Version 1.8.4.2
Digium Asterisk	Version 1.8.4
Digium Asterisk	Version 1.8.4 rc1
Digium Asterisk	Version 1.8.4 rc2
Digium Asterisk	Version 1.8.4 rc3