CVEvulnerability
CVE-2011-1507
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-04-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial of service (file descriptor exhaustion and disk space exhaustion) via a series of TCP connections.
Affected configurations
• digium asterisk 1.4.0
• digium asterisk 1.4.1
• digium asterisk 1.4.2
• digium asterisk 1.4.3
• digium asterisk 1.4.10
• digium asterisk 1.4.10.1
• digium asterisk 1.4.11
• digium asterisk 1.4.12
• digium asterisk 1.4.12.1
• digium asterisk 1.4.13
• digium asterisk 1.4.14
• digium asterisk 1.4.15
• digium asterisk 1.4.16
• digium asterisk 1.4.16.1
• digium asterisk 1.4.16.2
• digium asterisk 1.4.17
• digium asterisk 1.4.18
• digium asterisk 1.4.19
• digium asterisk 1.4.19.1
• digium asterisk 1.4.19.2
• digium asterisk 1.4.20
• digium asterisk 1.4.20.1
• digium asterisk 1.4.21
• digium asterisk 1.4.21.1
• digium asterisk 1.4.21.2
• digium asterisk 1.4.22
• digium asterisk 1.4.22.1
• digium asterisk 1.4.22.2
• digium asterisk 1.4.23
• digium asterisk 1.4.23.1
• digium asterisk 1.4.23.2
• digium asterisk 1.4.24
• digium asterisk 1.4.24.1
• digium asterisk 1.4.25
• digium asterisk 1.4.25.1
• digium asterisk 1.4.26
• digium asterisk 1.4.26.1
• digium asterisk 1.4.26.2
• digium asterisk 1.4.26.3
• digium asterisk 1.4.27
• digium asterisk 1.4.27.1
• digium asterisk 1.4.28
• digium asterisk 1.4.29
• digium asterisk 1.4.29.1
• digium asterisk 1.4.30
• digium asterisk 1.4.31
• digium asterisk 1.4.32
• digium asterisk 1.4.33
• digium asterisk 1.4.33.1
• digium asterisk 1.4.34
• digium asterisk 1.4.35
• digium asterisk 1.4.36
• digium asterisk 1.4.37
• digium asterisk 1.4.38
• digium asterisk 1.4.39
• digium asterisk 1.4.39.1
• digium asterisk 1.4.39.2
• digium asterisk 1.4.40
• digium asterisk 1.6.2.0
• digium asterisk 1.6.2.1
… and 63 more
Related
Weakness · not in database (1)
References
- http://downloads.digium.com/pub/security/AST-2011-005.html Vendor Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058922.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059702.html lists.fedoraproject.org
- http://secunia.com/advisories/44197 Vendor Advisory
- http://secunia.com/advisories/44529 secunia.com
- http://securitytracker.com/id?1025432 securitytracker.com
- http://www.debian.org/security/2011/dsa-2225 www.debian.org
- http://www.vupen.com/english/advisories/2011/1086 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/1107 www.vupen.com
- http://www.vupen.com/english/advisories/2011/1188 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=698916 Patch
- http://downloads.digium.com/pub/security/AST-2011-005.html Vendor Advisory
- http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058922.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2011-May/059702.html lists.fedoraproject.org
- http://secunia.com/advisories/44197 Vendor Advisory
- http://secunia.com/advisories/44529 secunia.com
- http://securitytracker.com/id?1025432 securitytracker.com
- http://www.debian.org/security/2011/dsa-2225 www.debian.org
- http://www.vupen.com/english/advisories/2011/1086 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/1107 www.vupen.com
- http://www.vupen.com/english/advisories/2011/1188 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=698916 Patch