PT-2011-2904 · Digium · Asterisknow+3

Matthew Nicholson · Publicado 2011-03-15 · Atualizado 2011-08-24 · CVE-2011-1147

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.4.x through 1.4.39.1 Asterisk Open Source versions 1.6.1.x through 1.6.1.21 Asterisk Open Source versions 1.6.2.x through 1.6.2.16.1 Asterisk Open Source versions 1.8.x through 1.8.2.3 Asterisk Business Edition C.x.x through C.3.6.2 AsteriskNOW version 1.5 s800i (Asterisk Appliance)

Description The issue is caused by multiple stack-based and heap-based buffer overflows in the decode open type and udptl rx packet functions in main/udptl.c, which can be exploited by remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet when T.38 support is enabled.

Recommendations For Asterisk Open Source versions 1.4.x through 1.4.39.1, update to version 1.4.39.2 or later. For Asterisk Open Source versions 1.6.1.x through 1.6.1.21, update to version 1.6.1.22 or later. For Asterisk Open Source versions 1.6.2.x through 1.6.2.16.1, update to version 1.6.2.16.2 or later. For Asterisk Open Source versions 1.8.x through 1.8.2.3, update to version 1.8.2.4 or later. For Asterisk Business Edition C.x.x through C.3.6.2, update to version C.3.6.3 or later. For AsteriskNOW version 1.5, consider upgrading to a newer version. For s800i (Asterisk Appliance), update to a patched version or apply the recommended fix.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-1147

DSA-2225-1

Produtos afetados

Asterisk Business Edition

Asterisk Open Source

Asterisknow

S800I

Referências · 17

• https://security-tracker.debian.org/tracker/CVE-2011-1147 · Aviso do Fabricante
• http://debian.org/security/2011/dsa-2225 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055634.html · Correção, Aviso do Fabricante
• http://secunia.com/advisories/43429 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2011/03/11/2 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1147 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055421.html · Correção, Aviso do Fabricante
• http://securitytracker.com/id?1025101 · Nota
• http://downloads.asterisk.org/pub/security/AST-2011-002.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2011/0635 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2011-1147 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-1147 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055030.html · Correção, Aviso do Fabricante
• http://securityfocus.com/bid/46474 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1147 · Nota