PT-2011-2904 · Digium · Asterisknow+3

Matthew Nicholson · Published 2011-03-15 · Updated 2011-08-24 · CVE-2011-1147

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.4.x through 1.4.39.1 Asterisk Open Source versions 1.6.1.x through 1.6.1.21 Asterisk Open Source versions 1.6.2.x through 1.6.2.16.1 Asterisk Open Source versions 1.8.x through 1.8.2.3 Asterisk Business Edition C.x.x through C.3.6.2 AsteriskNOW version 1.5 s800i (Asterisk Appliance)

Description The issue is caused by multiple stack-based and heap-based buffer overflows in the decode open type and udptl rx packet functions in main/udptl.c, which can be exploited by remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet when T.38 support is enabled.

Recommendations For Asterisk Open Source versions 1.4.x through 1.4.39.1, update to version 1.4.39.2 or later. For Asterisk Open Source versions 1.6.1.x through 1.6.1.21, update to version 1.6.1.22 or later. For Asterisk Open Source versions 1.6.2.x through 1.6.2.16.1, update to version 1.6.2.16.2 or later. For Asterisk Open Source versions 1.8.x through 1.8.2.3, update to version 1.8.2.4 or later. For Asterisk Business Edition C.x.x through C.3.6.2, update to version C.3.6.3 or later. For AsteriskNOW version 1.5, consider upgrading to a newer version. For s800i (Asterisk Appliance), update to a patched version or apply the recommended fix.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-1147

DSA-2225-1

Affected Products

Asterisk Business Edition

Asterisk Open Source

Asterisknow

S800I

References · 17

• https://security-tracker.debian.org/tracker/CVE-2011-1147 · Vendor Advisory
• http://debian.org/security/2011/dsa-2225 · Vendor Advisory
• http://secunia.com/advisories/43429 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-1147 · Vendor Advisory
• http://downloads.asterisk.org/pub/security/AST-2011-002.html · Vendor Advisory
• http://vupen.com/english/advisories/2011/0635 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2011-1147 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1147 · Security Note
• http://secunia.com/advisories/43702 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055634.html · Patch, Vendor Advisory
• http://openwall.com/lists/oss-security/2011/03/11/2 · Note
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055421.html · Patch, Vendor Advisory
• http://securitytracker.com/id?1025101 · Note
• http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055030.html · Patch, Vendor Advisory
• http://securityfocus.com/bid/46474 · Note