CVE-2011-1174
CVE-2011-1174
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data.
EPSS 2,7% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
asterisk Debian:14
- Versiones
- 0.1.11-3
- 0.1.11-3woody1
- 1:1.0.5-2
- 1:1.0.5-4
- 1:1.0.6-1
- 1:1.0.6-2
- 1:1.0.7-1
- 1:1.0.7.dfsg.1-1
- 1:1.0.7.dfsg.1-2
- 1:1.0.7.dfsg.1-2sarge1
- 1:1.0.7.dfsg.1-2sarge2
- 1:1.0.7.dfsg.1-2sarge3
- 1:1.0.7.dfsg.1-2sarge4
- 1:1.0.7.dfsg.1-2sarge5
- 1:1.0.7.dfsg.1-2sarge6
- 1:1.0.9.dfsg-1
- 1:1.0.9.dfsg-3
- 1:1.0.9.dfsg-4
- 1:1.0.9.dfsg-5
- 1:1.0.9.dfsg-6
- 1:1.2.0-beta1.dfsg-1
- 1:1.2.0-beta2.dfsg-1
- 1:1.2.0-beta2.dfsg-2
- 1:1.2.0-beta2.dfsg-3
- 1:1.2.0-rc1.dfsg-1
- 1:1.2.0-rc2.dfsg-1
- 1:1.2.0.dfsg-1
- 1:1.2.0.dfsg-2
- 1:1.2.0.dfsg-3
- 1:1.2.0.dfsg-4
- 1:1.2.0.dfsg-5
- 1:1.2.0.dfsg-6
- 1:1.2.1.dfsg-1
- 1:1.2.1.dfsg-2
- 1:1.2.1.dfsg-3
- 1:1.2.10.dfsg-1
- 1:1.2.10.dfsg-1bpo1
- 1:1.2.10.dfsg-2
- 1:1.2.10.dfsg-3
- 1:1.2.11.dfsg-1
- 1:1.2.12.1.dfsg-1
- 1:1.2.13~dfsg-1
- 1:1.2.13~dfsg-2
- 1:1.2.13~dfsg-2etch1
- 1:1.2.13~dfsg-2etch2
- 1:1.2.13~dfsg-2etch3
- 1:1.2.13~dfsg-2etch4
- 1:1.2.14~dfsg-1
- 1:1.2.14~dfsg-2
- 1:1.2.14~dfsg-3
- 1:1.2.14~dfsg-4
- 1:1.2.15~dfsg-1
- 1:1.2.16~dfsg-1
- 1:1.2.17~dfsg-1
- 1:1.2.4.dfsg-1
- 1:1.2.4.dfsg-2
- 1:1.2.4.dfsg-3
- 1:1.2.4.dfsg-4
- 1:1.2.4.dfsg-5
- 1:1.2.4.dfsg-6
- 1:1.2.4.dfsg-6+b1
- 1:1.2.4.dfsg-7
- 1:1.2.7.1.dfsg-1
- 1:1.2.7.1.dfsg-2
- 1:1.2.7.1.dfsg-3
- 1:1.2.9.1.dfsg-1
- 1:1.4.10~dfsg-1
- 1:1.4.11~dfsg-1
- 1:1.4.11~dfsg-2
- 1:1.4.11~dfsg-3
- 1:1.4.11~dfsg-4
- 1:1.4.13~dfsg-1
- 1:1.4.15~dfsg-1
- 1:1.4.16.2~dfsg-1
- 1:1.4.16.2~dfsg-2
- 1:1.4.17~dfsg-1
- 1:1.4.17~dfsg-2
- 1:1.4.18.1~dfsg-1
- 1:1.4.18~dfsg-1
- 1:1.4.19.1~dfsg-1
- 1:1.4.20~dfsg-1
- 1:1.4.21.1~dfsg-1
- 1:1.4.21.2~dfsg-1
- 1:1.4.21.2~dfsg-2
- 1:1.4.21.2~dfsg-3
- 1:1.4.21.2~dfsg-3+lenny1
- 1:1.4.21.2~dfsg-3+lenny2
- 1:1.4.21.2~dfsg-3+lenny2.1
- 1:1.4.21.2~dfsg-3+lenny3
- 1:1.4.21.2~dfsg-3+lenny5
- 1:1.4.21.2~dfsg-3+lenny6
- 1:1.4.21.2~dfsg-3.1
- 1:1.4.2~dfsg-1
- 1:1.4.2~dfsg-2
- 1:1.4.2~dfsg-3
- 1:1.4.2~dfsg-4
- 1:1.4.2~dfsg-5
- 1:1.4.3~dfsg-1
- 1:1.4.4~dfsg-1
- 1:1.4.4~dfsg-2
- 1:1.4.4~dfsg-3
- 1:1.4.5~dfsg-1
- 1:1.4.6~dfsg-1
- 1:1.4.8~dfsg-1
- 1:1.4.8~dfsg-2
- 1:1.4.9~dfsg-1
- 1:1.6.1.0~dfsg-1
- 1:1.6.1.0~dfsg~rc3-1
- 1:1.6.2.0-1
- 1:1.6.2.0~dfsg~beta3-1
- 1:1.6.2.0~dfsg~rc1-1
- 1:1.6.2.0~rc3-1
- 1:1.6.2.0~rc3-2
- 1:1.6.2.0~rc6-1
- 1:1.6.2.0~rc7-1
- 1:1.6.2.2-1
- 1:1.6.2.6-1
- 1:1.6.2.7-1
- 1:1.6.2.9-1
- 1:1.6.2.9-1~bpo50+1
- 1:1.6.2.9-1~bpo50+2
- 1:1.6.2.9-1~bpo50+3
- 1:1.6.2.9-2
- 1:1.6.2.9-2+squeeze1
- 1:1.6.2.9-2+squeeze10
- 1:1.6.2.9-2+squeeze11
- 1:1.6.2.9-2+squeeze12
- 1:1.6.2.9-2+squeeze2
- 1:1.6.2.9-2+squeeze3
- 1:1.6.2.9-2+squeeze4
- 1:1.6.2.9-2+squeeze5
- 1:1.6.2.9-2+squeeze6
- 1:1.6.2.9-2+squeeze7
- 1:1.6.2.9-2+squeeze8
- 1:1.6.2.9-2+squeeze9
- Intervalos de versiones afectados
- ECOSYSTEM: < 1:1.8.3.3-1
Actualiza a 1:1.8.3.3-1
Fuentes originales
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057156.html
- http://www.debian.org/security/2011/dsa-2225
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057163.html
- https://bugzilla.redhat.com/show_bug.cgi?id=688675
- http://downloads.asterisk.org/pub/security/AST-2011-003.html
- http://openwall.com/lists/oss-security/2011/03/17/5
- http://www.securityfocus.com/bid/46897
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66139
- http://lists.fedoraproject.org/pipermail/package-announce/2011-March/056945.html
- http://www.vupen.com/english/advisories/2011/0686
- http://www.vupen.com/english/advisories/2011/0790
- http://securitytracker.com/id?1025223
- http://openwall.com/lists/oss-security/2011/03/21/12
- https://nvd.nist.gov/vuln/detail/CVE-2011-1174