GCVE - cpe:2.3:a:digium:asterisk:1.6.1:rc1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:digium:asterisk:1.6.1:rc1:*:*:*:*:*:*

part: a version: 1.6.1 update: rc1

Vendor	Digium (`05ad29b7-5b41-56d5-935d-a279ab7f14bc`)
Product	Asterisk (`a75a6886-b0b4-5160-9cfa-f749f3c86956`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/asterisk/asterisk`	purl2cpe	2026-06-01 10:15:41.875099

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2529`	vulnerable	2026-06-08 04:58:07.509167	Details available chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet. Published: 2011-07-06T19:00:00.000Z Updated: 2024-08-06T23:08:22.019Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/68203 http://www.osvdb.org/73307 http://www.securityfocus.com/bid/48431 http://downloads.asterisk.org/pub/security/AST-2011-008.html http://secunia.com/advisories/45239	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1175`	vulnerable	2026-06-08 04:57:56.734906	Details available tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by establishing many short TCP sessions to services that use a certain TLS API. Published: 2011-03-31T22:00:00.000Z Updated: 2024-08-06T22:21:32.241Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057156.html https://exchange.xforce.ibmcloud.com/vulnerabilities/66140 http://downloads.asterisk.org/pub/security/AST-2011-004.html http://www.debian.org/security/2011/dsa-2225 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057163.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1174`	vulnerable	2026-06-08 04:57:56.714634	Details available manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data. Published: 2011-03-31T22:00:00.000Z Updated: 2024-08-06T22:21:33.497Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057156.html http://www.debian.org/security/2011/dsa-2225 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057163.html https://bugzilla.redhat.com/show_bug.cgi?id=688675 http://downloads.asterisk.org/pub/security/AST-2011-003.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0871`	vulnerable	2026-06-08 04:51:11.737089	Details available The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic option enabled, allows remote authenticated users to cause a denial of service (crash) via a SIP INVITE request without any headers, which triggers a NULL pointer dereference in the (1) sip_uri_headers_cmp and (2) sip_uri_params_cmp functions. Published: 2009-03-11T14:00:00.000Z Updated: 2024-08-07T04:48:52.606Z Open on db.gcve.eu Reference links http://osvdb.org/52568 http://www.securityfocus.com/bid/34070 http://www.securitytracker.com/id?1021834 http://www.securityfocus.com/archive/1/501656/100/0/threaded http://bugs.digium.com/view.php?id=14417	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.