Digium Asterisk 1.6.1.24
Approved changes feed: RSS · Atom
cpe:2.3:a:digium:asterisk:1.6.1.24:*:*:*:*:*:*:*
part: a version: 1.6.1.24 update: *
| Vendor | Digium (05ad29b7-5b41-56d5-935d-a279ab7f14bc) |
|---|---|
| Product | Asterisk (a75a6886-b0b4-5160-9cfa-f749f3c86956) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/asterisk/asterisk |
purl2cpe | 2026-06-01 10:15:41.875066 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-2529 |
vulnerable | 2026-06-08 04:58:07.509884 |
Details available
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet.
Published: 2011-07-06T19:00:00.000Z
Updated: 2024-08-06T23:08:22.019Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1599 |
vulnerable | 2026-06-08 04:58:00.900435 |
Details available
manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows remote authenticated users to execute arbitrary commands via an Originate action that has an Async header in conjunction with an Application header.
Published: 2011-04-27T00:00:00.000Z
Updated: 2024-08-06T22:28:41.962Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1507 |
vulnerable | 2026-06-08 04:57:59.932220 |
Details available
Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote attackers to cause a denial of service (file descriptor exhaustion and disk space exhaustion) via a series of TCP connections.
Published: 2011-04-27T00:00:00.000Z
Updated: 2024-08-06T22:28:41.814Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.