CVE-2011-4598

Published: Dec 15, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted sequence of SIP requests.

Affected (80)

Products: Digium: Asterisk

Digium

1 product

Asterisk

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.8.0
Digium Asterisk	Version 1.8.0 beta1
Digium Asterisk	Version 1.8.0 beta2
Digium Asterisk	Version 1.8.0 beta3
Digium Asterisk	Version 1.8.0 beta4
Digium Asterisk	Version 1.8.0 beta5
Digium Asterisk	Version 1.8.0 rc2
Digium Asterisk	Version 1.8.0 rc3
Digium Asterisk	Version 1.8.0 rc4
Digium Asterisk	Version 1.8.0 rc5
Digium Asterisk	Version 1.8.1.1
Digium Asterisk	Version 1.8.1.2
Digium Asterisk	Version 1.8.1
Digium Asterisk	Version 1.8.1 rc1
Digium Asterisk	Version 1.8.2.1
Digium Asterisk	Version 1.8.2.2
Digium Asterisk	Version 1.8.2.3
Digium Asterisk	Version 1.8.2.4
Digium Asterisk	Version 1.8.2
Digium Asterisk	Version 1.8.3.1
Digium Asterisk	Version 1.8.3.2
Digium Asterisk	Version 1.8.3.3
Digium Asterisk	Version 1.8.3
Digium Asterisk	Version 1.8.3 rc1
Digium Asterisk	Version 1.8.3 rc2
Digium Asterisk	Version 1.8.3 rc3
Digium Asterisk	Version 1.8.4.1
Digium Asterisk	Version 1.8.4.2
Digium Asterisk	Version 1.8.4.3
Digium Asterisk	Version 1.8.4.4
Digium Asterisk	Version 1.8.4
Digium Asterisk	Version 1.8.4 rc1
Digium Asterisk	Version 1.8.4 rc2
Digium Asterisk	Version 1.8.4 rc3
Digium Asterisk	Version 1.8.5.0
Digium Asterisk	Version 1.8.5
Digium Asterisk	Version 1.8.5 rc1
Digium Asterisk	Version 1.8.6.0
Digium Asterisk	Version 1.8.6.0 rc1
Digium Asterisk	Version 1.8.6.0 rc2
Digium Asterisk	Version 1.8.6.0 rc3
Digium Asterisk	Version 1.8.7.0
Digium Asterisk	Version 1.8.7.0 rc1
Digium Asterisk	Version 1.8.7.0 rc2
Digium Asterisk	Version 1.8.7.1

Configuration B

35 vulnerable

Vulnerable Software	Affected Versions
Digium Asterisk	Version 1.6.2.0
Digium Asterisk	Version 1.6.2.0 rc2
Digium Asterisk	Version 1.6.2.0 rc3
Digium Asterisk	Version 1.6.2.0 rc4
Digium Asterisk	Version 1.6.2.0 rc5
Digium Asterisk	Version 1.6.2.0 rc6
Digium Asterisk	Version 1.6.2.0 rc7
Digium Asterisk	Version 1.6.2.0 rc8
Digium Asterisk	Version 1.6.2.15 rc1
Digium Asterisk	Version 1.6.2.16.1
Digium Asterisk	Version 1.6.2.16.2
Digium Asterisk	Version 1.6.2.16
Digium Asterisk	Version 1.6.2.16 rc1
Digium Asterisk	Version 1.6.2.17.1
Digium Asterisk	Version 1.6.2.17.2
Digium Asterisk	Version 1.6.2.17.3
Digium Asterisk	Version 1.6.2.17
Digium Asterisk	Version 1.6.2.17 rc1
Digium Asterisk	Version 1.6.2.17 rc2
Digium Asterisk	Version 1.6.2.17 rc3
Digium Asterisk	Version 1.6.2.18
Digium Asterisk	Version 1.6.2.18 rc1
Digium Asterisk	Version 1.6.2.19
Digium Asterisk	Version 1.6.2.19 rc1
Digium Asterisk	Version 1.6.2.1
Digium Asterisk	Version 1.6.2.1 rc1
Digium Asterisk	Version 1.6.2.20
Digium Asterisk	Version 1.6.2.21
Digium Asterisk	Version 1.6.2.2
Digium Asterisk	Version 1.6.2.3 rc2
Digium Asterisk	Version 1.6.2.4
Digium Asterisk	Version 1.6.2.5
Digium Asterisk	Version 1.6.2.6
Digium Asterisk	Version 1.6.2.6 rc1
Digium Asterisk	Version 1.6.2.6 rc2