CVE-2011-1174
First published: Thu Mar 17 2011(Updated: )
AST-2011-003 [1] describes a resrouce exhaustion flaw in the Asterisk Manager Interface. If manger connections were rapily opened, sent invalid data, then closed, it could cause Asterisk to exhaust available CPU and memory resources. The Manager Interface is disabled by default. Versions 1.6.2.x and 1.8.x are affected, and 1.6.2.17.1 and 1.8.3.1 have been released to correct this flaw. [1] <a href="http://downloads.asterisk.org/pub/security/AST-2011-003.pdf">http://downloads.asterisk.org/pub/security/AST-2011-003.pdf</a>
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Digium Asterisk | =1.6.1-beta2 | |
| Digium Asterisk | =1.6.1.0-rc4 | |
| Digium Asterisk | =1.6.1.8 | |
| Digium Asterisk | =1.6.1.7-rc1 | |
| Digium Asterisk | =1.6.1.5-rc1 | |
| Digium Asterisk | =1.6.1.12 | |
| Digium Asterisk | =1.6.1.0-rc5 | |
| Digium Asterisk | =1.6.1.3-rc1 | |
| Digium Asterisk | =1.6.1-beta4 | |
| Digium Asterisk | =1.6.1.15-rc2 | |
| Digium Asterisk | =1.6.1.18-rc1 | |
| Digium Asterisk | =1.6.1.2 | |
| Digium Asterisk | =1.6.1.19-rc2 | |
| Digium Asterisk | =1.6.1.6 | |
| Digium Asterisk | =1.6.1.5 | |
| Digium Asterisk | =1.6.1.20-rc1 | |
| Digium Asterisk | =1.6.1.0 | |
| Digium Asterisk | =1.6.1.18-rc2 | |
| Digium Asterisk | =1.6.1.14 | |
| Digium Asterisk | =1.6.1.20-rc2 | |
| Digium Asterisk | =1.6.1-rc1 | |
| Digium Asterisk | =1.6.1.10-rc2 | |
| Digium Asterisk | =1.6.1.19 | |
| Digium Asterisk | =1.6.1.12-rc1 | |
| Digium Asterisk | =1.6.1.22 | |
| Digium Asterisk | =1.6.1.11 | |
| Digium Asterisk | =1.6.1.10-rc3 | |
| Digium Asterisk | =1.6.1 | |
| Digium Asterisk | =1.6.1.20 | |
| Digium Asterisk | =1.6.1.9 | |
| Digium Asterisk | =1.6.1.19-rc3 | |
| Digium Asterisk | =1.6.1.18 | |
| Digium Asterisk | =1.6.1.17 | |
| Digium Asterisk | =1.6.1-beta3 | |
| Digium Asterisk | =1.6.1.4 | |
| Digium Asterisk | =1.6.1.10 | |
| Digium Asterisk | =1.6.1.16 | |
| Digium Asterisk | =1.6.1.7-rc2 | |
| Digium Asterisk | =1.6.1.23 | |
| Digium Asterisk | =1.6.1.0-rc2 | |
| Digium Asterisk | =1.6.1.21 | |
| Digium Asterisk | =1.6.1.0-rc3 | |
| Digium Asterisk | =1.6.1.10-rc1 | |
| Digium Asterisk | =1.6.1.19-rc1 | |
| Digium Asterisk | =1.6.1.13 | |
| Digium Asterisk | =1.6.1.13-rc1 | |
| Digium Asterisk | =1.6.1.1 | |
| Digium Asterisk | =1.6.1-beta1 | |
| Digium Asterisk | =1.6.2.0-rc3 | |
| Digium Asterisk | =1.6.2.0-rc2 | |
| Digium Asterisk | =1.6.2.1 | |
| Digium Asterisk | =1.6.2.0-rc4 | |
| Digium Asterisk | =1.6.2.4 | |
| Digium Asterisk | =1.6.2.6 | |
| Digium Asterisk | =1.6.2.0-rc5 | |
| Digium Asterisk | =1.6.2.0-rc7 | |
| Digium Asterisk | =1.6.2.16-rc1 | |
| Digium Asterisk | =1.6.2.17-rc1 | |
| Digium Asterisk | =1.6.2.1-rc1 | |
| Digium Asterisk | =1.6.2.16 | |
| Digium Asterisk | =1.6.2.15-rc1 | |
| Digium Asterisk | =1.6.2.17 | |
| Digium Asterisk | =1.6.2.6-rc1 | |
| Digium Asterisk | =1.6.2.17.1 | |
| Digium Asterisk | =1.6.2.2 | |
| Digium Asterisk | =1.6.2.0-rc8 | |
| Digium Asterisk | =1.6.2.3-rc2 | |
| Digium Asterisk | =1.6.2.17-rc3 | |
| Digium Asterisk | =1.6.2.16.1 | |
| Digium Asterisk | =1.6.2.0 | |
| Digium Asterisk | =1.6.2.17-rc2 | |
| Digium Asterisk | =1.6.2.5 | |
| Digium Asterisk | =1.6.2.0-rc6 | |
| Digium Asterisk | =1.6.2.6-rc2 | |
| Digium Asterisk | =1.8.3-rc3 | |
| Digium Asterisk | =1.8.3 | |
| Digium Asterisk | =1.8.0-beta2 | |
| Digium Asterisk | =1.8.3-rc1 | |
| Digium Asterisk | =1.8.1 | |
| Digium Asterisk | =1.8.1.2 | |
| Digium Asterisk | =1.8.0-beta4 | |
| Digium Asterisk | =1.8.0-rc5 | |
| Digium Asterisk | =1.8.3.1 | |
| Digium Asterisk | =1.8.0-beta3 | |
| Digium Asterisk | =1.8.0-beta5 | |
| Digium Asterisk | =1.8.0-rc2 | |
| Digium Asterisk | =1.8.3-rc2 | |
| Digium Asterisk | =1.8.2.3 | |
| Digium Asterisk | =1.8.2.1 | |
| Digium Asterisk | =1.8.1-rc1 | |
| Digium Asterisk | =1.8.0 | |
| Digium Asterisk | =1.8.0-rc3 | |
| Digium Asterisk | =1.8.1.1 | |
| Digium Asterisk | =1.8.2 | |
| Digium Asterisk | =1.8.2.2 | |
| Digium Asterisk | =1.8.0-beta1 | |
| Digium Asterisk | =1.8.0-rc4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securitytracker.com/id?1025223
- http://openwall.com/lists/oss-security/2011/03/21/12
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056945.html
- http://openwall.com/lists/oss-security/2011/03/17/5
- http://www.vupen.com/english/advisories/2011/0686
- http://www.securityfocus.com/bid/46897
- http://www.vupen.com/english/advisories/2011/0790
- http://downloads.asterisk.org/pub/security/AST-2011-003.html
- https://bugzilla.redhat.com/show_bug.cgi?id=688675
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057156.html
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057163.html
- http://www.debian.org/security/2011/dsa-2225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66139
- http://downloads.asterisk.org/pub/security/AST-2011-003.pdf
- https://access.redhat.com/security/cve/CVE-2011-1174
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2011-1174
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/last-modified-date
- agent/tags
- agent/description
- agent/event
- agent/trending
- vendor/digium
- canonical/digium asterisk
- version/digium asterisk/1.6.1-beta2
- version/digium asterisk/1.6.1.0-rc4
- version/digium asterisk/1.6.1.8
- version/digium asterisk/1.6.1.7-rc1
- version/digium asterisk/1.6.1.5-rc1
- version/digium asterisk/1.6.1.12
- version/digium asterisk/1.6.1.0-rc5
- version/digium asterisk/1.6.1.3-rc1
- version/digium asterisk/1.6.1-beta4
- version/digium asterisk/1.6.1.15-rc2
- version/digium asterisk/1.6.1.18-rc1
- version/digium asterisk/1.6.1.2
- version/digium asterisk/1.6.1.19-rc2
- version/digium asterisk/1.6.1.6
- version/digium asterisk/1.6.1.5
- version/digium asterisk/1.6.1.20-rc1
- version/digium asterisk/1.6.1.0
- version/digium asterisk/1.6.1.18-rc2
- version/digium asterisk/1.6.1.14
- version/digium asterisk/1.6.1.20-rc2
- version/digium asterisk/1.6.1-rc1
- version/digium asterisk/1.6.1.10-rc2
- version/digium asterisk/1.6.1.19
- version/digium asterisk/1.6.1.12-rc1
- version/digium asterisk/1.6.1.22
- version/digium asterisk/1.6.1.11
- version/digium asterisk/1.6.1.10-rc3
- version/digium asterisk/1.6.1
- version/digium asterisk/1.6.1.20
- version/digium asterisk/1.6.1.9
- version/digium asterisk/1.6.1.19-rc3
- version/digium asterisk/1.6.1.18
- version/digium asterisk/1.6.1.17
- version/digium asterisk/1.6.1-beta3
- version/digium asterisk/1.6.1.4
- version/digium asterisk/1.6.1.10
- version/digium asterisk/1.6.1.16
- version/digium asterisk/1.6.1.7-rc2
- version/digium asterisk/1.6.1.23
- version/digium asterisk/1.6.1.0-rc2
- version/digium asterisk/1.6.1.21
- version/digium asterisk/1.6.1.0-rc3
- version/digium asterisk/1.6.1.10-rc1
- version/digium asterisk/1.6.1.19-rc1
- version/digium asterisk/1.6.1.13
- version/digium asterisk/1.6.1.13-rc1
- version/digium asterisk/1.6.1.1
- version/digium asterisk/1.6.1-beta1
- version/digium asterisk/1.6.2.0-rc3
- version/digium asterisk/1.6.2.0-rc2
- version/digium asterisk/1.6.2.1
- version/digium asterisk/1.6.2.0-rc4
- version/digium asterisk/1.6.2.4
- version/digium asterisk/1.6.2.6
- version/digium asterisk/1.6.2.0-rc5
- version/digium asterisk/1.6.2.0-rc7
- version/digium asterisk/1.6.2.16-rc1
- version/digium asterisk/1.6.2.17-rc1
- version/digium asterisk/1.6.2.1-rc1
- version/digium asterisk/1.6.2.16
- version/digium asterisk/1.6.2.15-rc1
- version/digium asterisk/1.6.2.17
- version/digium asterisk/1.6.2.6-rc1
- version/digium asterisk/1.6.2.17.1
- version/digium asterisk/1.6.2.2
- version/digium asterisk/1.6.2.0-rc8
- version/digium asterisk/1.6.2.3-rc2
- version/digium asterisk/1.6.2.17-rc3
- version/digium asterisk/1.6.2.16.1
- version/digium asterisk/1.6.2.0
- version/digium asterisk/1.6.2.17-rc2
- version/digium asterisk/1.6.2.5
- version/digium asterisk/1.6.2.0-rc6
- version/digium asterisk/1.6.2.6-rc2
- version/digium asterisk/1.8.3-rc3
- version/digium asterisk/1.8.3
- version/digium asterisk/1.8.0-beta2
- version/digium asterisk/1.8.3-rc1
- version/digium asterisk/1.8.1
- version/digium asterisk/1.8.1.2
- version/digium asterisk/1.8.0-beta4
- version/digium asterisk/1.8.0-rc5
- version/digium asterisk/1.8.3.1
- version/digium asterisk/1.8.0-beta3
- version/digium asterisk/1.8.0-beta5
- version/digium asterisk/1.8.0-rc2
- version/digium asterisk/1.8.3-rc2
- version/digium asterisk/1.8.2.3
- version/digium asterisk/1.8.2.1
- version/digium asterisk/1.8.1-rc1
- version/digium asterisk/1.8.0
- version/digium asterisk/1.8.0-rc3
- version/digium asterisk/1.8.1.1
- version/digium asterisk/1.8.2
- version/digium asterisk/1.8.2.2
- version/digium asterisk/1.8.0-beta1
- version/digium asterisk/1.8.0-rc4