NVD

Id
8118  
Name
CVE-2011-1147  
Description
Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-03-15  
Modified Date
2011-08-23  
Seq
2011-1147  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46467 8118 CVE-2011-1147 http://downloads.asterisk.org/pub/security/AST-2011-002.html  View
46468 8118 CVE-2011-1147 FEDORA-2011-2360  View
46469 8118 CVE-2011-1147 FEDORA-2011-2438  View
46470 8118 CVE-2011-1147 FEDORA-2011-2558  View
46471 8118 CVE-2011-1147 DSA-2225  View
46472 8118 CVE-2011-1147 [oss-security] 20110311 CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code  View
46473 8118 CVE-2011-1147 [oss-security] 20110311 Re: CVE Request -- Asterisk AST-2011-002 / Multiple array overflow and crash vulnerabilities in UDPTL code  View
46474 8118 CVE-2011-1147 46474  View
46475 8118 CVE-2011-1147 1025101  View
46476 8118 CVE-2011-1147 ADV-2011-0635  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34110 JVNDB-2011-004352 複数の Asterisk 製品におけるスタックベースおよびヒープベースのバッファオーバーフローの脆弱性 Asterisk Appliance、AsteriskNOW または Asterisk Open Source の main/udptl.c の (1) decode_open_type および (2) udptl_rx_packet 関数には、T.38 サポートが有効になっている際、スタックベースおよびヒープベースのバッファフローの脆弱性が存在します。 CVE-2011-1147 49054 CVE-2011-1147 8118 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004352.html 2011-02-21 2012-03-27 View