cvelistv5 - cve-2011-2529

CVE-2011-2529 (GCVE-0-2011-2529)

Vulnerability from cvelistv5

Published

2011-07-06 19:00

Modified

2024-08-06 23:08

Severity ?

CWE

Summary

chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet.

References

URL

Tags

	https://exchange.xforce.ibmcloud.com/vulnerabilities/68203	vdb-entry, x_refsource_XF
	http://www.osvdb.org/73307	vdb-entry, x_refsource_OSVDB
	http://www.securityfocus.com/bid/48431	vdb-entry, x_refsource_BID
	http://downloads.asterisk.org/pub/security/AST-2011-008.html	x_refsource_CONFIRM
	http://secunia.com/advisories/45239	third-party-advisory, x_refsource_SECUNIA
	http://downloads.asterisk.org/pub/security/AST-2011-008.diff	x_refsource_CONFIRM
	http://www.debian.org/security/2011/dsa-2276	vendor-advisory, x_refsource_DEBIAN
	http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html	vendor-advisory, x_refsource_FEDORA
	http://secunia.com/advisories/45048	third-party-advisory, x_refsource_SECUNIA
	http://securitytracker.com/id?1025706	vdb-entry, x_refsource_SECTRACK
	http://secunia.com/advisories/45201	third-party-advisory, x_refsource_SECUNIA

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T23:08:22.019Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "asterisk-sipsockread-dos(68203)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68203"
          },
          {
            "name": "73307",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/73307"
          },
          {
            "name": "48431",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/48431"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://downloads.asterisk.org/pub/security/AST-2011-008.html"
          },
          {
            "name": "45239",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45239"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://downloads.asterisk.org/pub/security/AST-2011-008.diff"
          },
          {
            "name": "DSA-2276",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2011/dsa-2276"
          },
          {
            "name": "FEDORA-2011-8914",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html"
          },
          {
            "name": "45048",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45048"
          },
          {
            "name": "1025706",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1025706"
          },
          {
            "name": "45201",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45201"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-06-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle \u0027\\0\u0027 characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-28T12:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "asterisk-sipsockread-dos(68203)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68203"
        },
        {
          "name": "73307",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/73307"
        },
        {
          "name": "48431",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/48431"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://downloads.asterisk.org/pub/security/AST-2011-008.html"
        },
        {
          "name": "45239",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45239"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://downloads.asterisk.org/pub/security/AST-2011-008.diff"
        },
        {
          "name": "DSA-2276",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2011/dsa-2276"
        },
        {
          "name": "FEDORA-2011-8914",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html"
        },
        {
          "name": "45048",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45048"
        },
        {
          "name": "1025706",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1025706"
        },
        {
          "name": "45201",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45201"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-2529",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle \u0027\\0\u0027 characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "asterisk-sipsockread-dos(68203)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68203"
            },
            {
              "name": "73307",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/73307"
            },
            {
              "name": "48431",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/48431"
            },
            {
              "name": "http://downloads.asterisk.org/pub/security/AST-2011-008.html",
              "refsource": "CONFIRM",
              "url": "http://downloads.asterisk.org/pub/security/AST-2011-008.html"
            },
            {
              "name": "45239",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45239"
            },
            {
              "name": "http://downloads.asterisk.org/pub/security/AST-2011-008.diff",
              "refsource": "CONFIRM",
              "url": "http://downloads.asterisk.org/pub/security/AST-2011-008.diff"
            },
            {
              "name": "DSA-2276",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2011/dsa-2276"
            },
            {
              "name": "FEDORA-2011-8914",
              "refsource": "FEDORA",
              "url": "http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062628.html"
            },
            {
              "name": "45048",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45048"
            },
            {
              "name": "1025706",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1025706"
            },
            {
              "name": "45201",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45201"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-2529",
    "datePublished": "2011-07-06T19:00:00.000Z",
    "dateReserved": "2011-06-16T00:00:00.000Z",
    "dateUpdated": "2024-08-06T23:08:22.019Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2011-AVI-371

Vulnerability from certfr_avis

Plusieurs vulnérabilités présentes dans Asterisk permettent à un utilisateur distant malintentionné, authentifié ou non sur le système, de provoquer un déni de service.

Description

Plusieurs vulnérabilités ont été découvertes dans différentes versions d'Asterisk.

La vulnérabilité dénommée AST-2011-008 permet à une personne malintentionnée de causer un déni de service à distance grâce à l'envoi de requêtes SIP contenant un octet nul. Cette vulnérabilité affecte les versions 1.6.0.x, 1.6.1.x, 1.6.2.x et 1.8.x de Asterisk Open Source.

La faille AST-2011-009 concerne le pilote de canal SIP. Le problème survient lors de la réception d'un paquet SIP contenant un en-tête Contact malformé. Elle touche le produit Asterisk Open Source dans ses versions 1.8.x.

La dernière vulnérabilité corrigée, AST-2011-010, résoud un problème présent dans le pilote de canal IAX2. Lors de l'utilisation de ce protocole, le message transmis contient une adresse mémoire à laquelle le poste récepteur va tenter d'accéder, provoquant ainsi un arrêt brutal de l'application. Cette vulnérabilité touche les versions 1.4.x inférieures à 1.4.37, 1.6.2.x inférieures à 1.6.2.15 et 1.8.x de Asterisk Open Source ainsi que les versions C.3.x inférieures à C.3.6 de Asterisk Business Edition.

Solution

Se référer aux bulletins de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Asterisk	Asterisk	Asterisk Open Source 1.6.x ;
Asterisk	Asterisk	Asterisk Open Source 1.8.x ;
Asterisk	Asterisk	Asterisk Business Edition C.3.
Asterisk	Asterisk	Asterisk Open Source 1.4.x ;

References

Title

Publication Time

Tags

Bulletin de sécurité Asterisk AST-2011-010 du 22 juin 2011	None	vendor-advisory
Bulletin de sécurité Asterisk AST-2011-008 du 20 juin 2011	None	vendor-advisory
Bulletin de sécurité Asterisk AST-2011-009 du 23 juin 2011	None	vendor-advisory
Bulletin de sécurité Asterisk AST-2011-009 :	-	other
Bulletin de sécurité Asterisk AST-2011-010 :	-	other
Bulletin de sécurité Asterisk AST-2011-008 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Asterisk Open Source 1.6.x ;",
      "product": {
        "name": "Asterisk",
        "vendor": {
          "name": "Asterisk",
          "scada": false
        }
      }
    },
    {
      "description": "Asterisk Open Source 1.8.x ;",
      "product": {
        "name": "Asterisk",
        "vendor": {
          "name": "Asterisk",
          "scada": false
        }
      }
    },
    {
      "description": "Asterisk Business Edition C.3.",
      "product": {
        "name": "Asterisk",
        "vendor": {
          "name": "Asterisk",
          "scada": false
        }
      }
    },
    {
      "description": "Asterisk Open Source 1.4.x ;",
      "product": {
        "name": "Asterisk",
        "vendor": {
          "name": "Asterisk",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans diff\u00e9rentes versions\nd\u0027Asterisk.\n\nLa vuln\u00e9rabilit\u00e9 d\u00e9nomm\u00e9e AST-2011-008 permet \u00e0 une personne\nmalintentionn\u00e9e de causer un d\u00e9ni de service \u00e0 distance gr\u00e2ce \u00e0 l\u0027envoi\nde requ\u00eates SIP contenant un octet nul. Cette vuln\u00e9rabilit\u00e9 affecte les\nversions 1.6.0.x, 1.6.1.x, 1.6.2.x et 1.8.x de Asterisk Open Source.\n\nLa faille AST-2011-009 concerne le pilote de canal SIP. Le probl\u00e8me\nsurvient lors de la r\u00e9ception d\u0027un paquet SIP contenant un en-t\u00eate\nContact malform\u00e9. Elle touche le produit Asterisk Open Source dans ses\nversions 1.8.x.\n\nLa derni\u00e8re vuln\u00e9rabilit\u00e9 corrig\u00e9e, AST-2011-010, r\u00e9soud un probl\u00e8me\npr\u00e9sent dans le pilote de canal IAX2. Lors de l\u0027utilisation de ce\nprotocole, le message transmis contient une adresse m\u00e9moire \u00e0 laquelle\nle poste r\u00e9cepteur va tenter d\u0027acc\u00e9der, provoquant ainsi un arr\u00eat brutal\nde l\u0027application. Cette vuln\u00e9rabilit\u00e9 touche les versions 1.4.x\ninf\u00e9rieures \u00e0 1.4.37, 1.6.2.x inf\u00e9rieures \u00e0 1.6.2.15 et 1.8.x de\nAsterisk Open Source ainsi que les versions C.3.x inf\u00e9rieures \u00e0 C.3.6 de\nAsterisk Business Edition.\n\n## Solution\n\nSe r\u00e9f\u00e9rer aux bulletins de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-2529",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2529"
    },
    {
      "name": "CVE-2011-2535",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-2535"
    }
  ],
  "initial_release_date": "2011-06-29T00:00:00",
  "last_revision_date": "2011-06-29T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Asterisk AST-2011-009 :",
      "url": "http://downloads.asterisk.org/pub/security/AST-2011-009.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Asterisk AST-2011-010 :",
      "url": "http://downloads.asterisk.org/pub/security/AST-2011-010.html"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Asterisk AST-2011-008 :",
      "url": "http://downloads.asterisk.org/pub/security/AST-2011-008.html"
    }
  ],
  "reference": "CERTA-2011-AVI-371",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-06-29T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    }
  ],
  "summary": "Plusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans \u003cspan\nclass=\"textit\"\u003eAsterisk\u003c/span\u003e permettent \u00e0 un utilisateur distant\nmalintentionn\u00e9, authentifi\u00e9 ou non sur le syst\u00e8me, de provoquer un d\u00e9ni\nde service.\n",
  "title": "Vuln\u00e9rabilit\u00e9s dans Asterisk",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Asterisk AST-2011-010 du 22 juin 2011",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Asterisk AST-2011-008 du 20 juin 2011",
      "url": null
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Asterisk AST-2011-009 du 23 juin 2011",
      "url": null
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2011-2529 (GCVE-0-2011-2529)

Vulnerability from cvelistv5

CERTA-2011-AVI-371

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature