GCVE - cpe:2.3:a:digium:asterisk:1.6.1.19:rc2:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:digium:asterisk:1.6.1.19:rc2:*:*:*:*:*:*

part: a version: 1.6.1.19 update: rc2

Vendor	Digium (`05ad29b7-5b41-56d5-935d-a279ab7f14bc`)
Product	Asterisk (`a75a6886-b0b4-5160-9cfa-f749f3c86956`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/asterisk/asterisk`	purl2cpe	2026-06-01 10:15:41.875053

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2529`	vulnerable	2026-06-08 04:58:07.509750	Details available chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet. Published: 2011-07-06T19:00:00.000Z Updated: 2024-08-06T23:08:22.019Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/68203 http://www.osvdb.org/73307 http://www.securityfocus.com/bid/48431 http://downloads.asterisk.org/pub/security/AST-2011-008.html http://secunia.com/advisories/45239	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1599`	vulnerable	2026-06-08 04:58:00.900276	Details available manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header. Published: 2011-04-27T00:00:00.000Z Updated: 2024-08-06T22:28:41.962Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/1188 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058922.html http://www.debian.org/security/2011/dsa-2225 http://openwall.com/lists/oss-security/2011/04/22/6 http://www.securityfocus.com/bid/47537	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1507`	vulnerable	2026-06-08 04:57:59.927581	Details available Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial of service (file descriptor exhaustion and disk space exhaustion) via a series of TCP connections. Published: 2011-04-27T00:00:00.000Z Updated: 2024-08-06T22:28:41.814Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2011/1188 http://lists.fedoraproject.org/pipermail/package-announce/2011-April/058922.html http://www.debian.org/security/2011/dsa-2225 http://securitytracker.com/id?1025432 http://www.vupen.com/english/advisories/2011/1086	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1175`	vulnerable	2026-06-08 04:57:56.735852	Details available tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) by establishing many short TCP sessions to services that use a certain TLS API. Published: 2011-03-31T22:00:00.000Z Updated: 2024-08-06T22:21:32.241Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057156.html https://exchange.xforce.ibmcloud.com/vulnerabilities/66140 http://downloads.asterisk.org/pub/security/AST-2011-004.html http://www.debian.org/security/2011/dsa-2225 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057163.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1174`	vulnerable	2026-06-08 04:57:56.715860	Details available manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data. Published: 2011-03-31T22:00:00.000Z Updated: 2024-08-06T22:21:33.497Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057156.html http://www.debian.org/security/2011/dsa-2225 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/057163.html https://bugzilla.redhat.com/show_bug.cgi?id=688675 http://downloads.asterisk.org/pub/security/AST-2011-003.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1147`	vulnerable	2026-06-08 04:57:56.130049	Details available Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet. Published: 2011-03-15T17:00:00.000Z Updated: 2024-08-06T22:14:27.830Z Open on db.gcve.eu Reference links http://secunia.com/advisories/43702 http://www.securityfocus.com/bid/46474 http://www.debian.org/security/2011/dsa-2225 http://secunia.com/advisories/43429 http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055421.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.