vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2011-1147

N/A
Published: March 15, 2011 at 05:00 PM UTC
Updated: June 16, 2026 at 11:28 PM UTC
3 products affected across 1 vendorAsteriskS800IAsterisknow

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 4%

Description

Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Asterisk· Digium
95%
1.4.01.4.0 beta11.4.0 beta21.4.0 beta31.4.0 beta41.4.11.4.101.4.10.11.4.111.4.121.4.12.11.4.131.4.141.4.151.4.161.4.16.11.4.16.21.4.171.4.181.4.191.4.19 rc11.4.19 rc21.4.19 rc31.4.19 rc41.4.19.11.4.19.21.4.21.4.201.4.20 rc11.4.20 rc21.4.20 rc31.4.20.11.4.211.4.21 rc11.4.21 rc21.4.21.11.4.21.21.4.221.4.22 rc11.4.22 rc21.4.22 rc31.4.22 rc41.4.22 rc51.4.22.11.4.22.21.4.231.4.23 rc11.4.23 rc21.4.23 rc31.4.23 rc41.4.23.11.4.23.21.4.241.4.24 rc11.4.24.11.4.251.4.25 rc11.4.25.11.4.261.4.26 rc11.4.26 rc21.4.26 rc31.4.26 rc41.4.26 rc51.4.26 rc61.4.26.11.4.26.21.4.26.31.4.271.4.27 rc11.4.27 rc21.4.27 rc31.4.27 rc41.4.27 rc51.4.27.11.4.281.4.28 rc11.4.291.4.29 rc11.4.29.11.4.31.4.301.4.30 rc21.4.30 rc31.4.311.4.31 rc11.4.31 rc21.4.321.4.32 rc11.4.331.4.33 rc11.4.33 rc21.4.33.11.4.341.4.34 rc11.4.34 rc21.4.351.4.35 rc11.4.361.4.36 rc11.4.371.4.37 rc11.4.381.4.38 rc11.4.391.4.39 rc11.4.39.11.6.1.01.6.1.0 rc21.6.1.0 rc31.6.1.0 rc41.6.1.0 rc51.6.1.11.6.1.101.6.1.10 rc11.6.1.10 rc21.6.1.10 rc31.6.1.111.6.1.121.6.1.12 rc11.6.1.131.6.1.13 rc11.6.1.141.6.1.15 rc21.6.1.161.6.1.171.6.1.181.6.1.18 rc11.6.1.18 rc21.6.1.191.6.1.19 rc11.6.1.19 rc21.6.1.19 rc31.6.1.21.6.1.201.6.1.20 rc11.6.1.20 rc21.6.1.211.6.1.3 rc11.6.1.41.6.1.51.6.1.5 rc11.6.1.61.6.1.7 rc11.6.1.7 rc21.6.1.81.6.1.91.6.2.01.6.2.0 rc21.6.2.0 rc31.6.2.0 rc41.6.2.0 rc51.6.2.0 rc61.6.2.0 rc71.6.2.0 rc81.6.2.11.6.2.1 rc11.6.2.15 rc11.6.2.161.6.2.16 rc11.6.2.16.11.6.2.21.6.2.3 rc21.6.2.41.6.2.51.6.2.61.6.2.6 rc11.6.2.6 rc21.8.01.8.0 beta11.8.0 beta21.8.0 beta31.8.0 beta41.8.0 beta51.8.0 rc21.8.0 rc31.8.0 rc41.8.0 rc51.8.11.8.1 rc11.8.1.11.8.1.21.8.21.8.2.11.8.2.21.8.2.3c.1.0 beta7c.1.0 beta8c.1.6c.1.6.1c.1.6.2c.1.8.0c.1.8.1c.2.3c.3.0c.3.1.0c.3.1.1c.3.2.2c.3.2.3c.3.3.2c.3.6.2
Asterisknow· Digium
95%
1.5
S800I· Digium
95%
All versions

References (12)

x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://downloads.asterisk.org/pub/security/AST-2011-002.html
Vendor Advisoryx_refsource_FEDORAPatch
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055030.html
Vendor Advisoryx_refsource_FEDORAPatch
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055421.html
Vendor Advisoryx_refsource_FEDORAPatch
Source: [email protected]
http://lists.fedoraproject.org/pipermail/package-announce/2011-March/055634.html
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/43429
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
Source: [email protected]
http://secunia.com/advisories/43702
Vendor Advisoryx_refsource_DEBIAN
Source: [email protected]
http://www.debian.org/security/2011/dsa-2225
Mailing Listx_refsource_MLIST
Source: [email protected]
http://www.openwall.com/lists/oss-security/2011/03/11/2

CVSS

6.8MEDIUM[email protected]
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-119

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card