CVE-2011-2535

N/A
Published: July 6, 2011 at 07:00 PM UTC
Updated: June 16, 2026 at 11:31 PM UTC
1 product affected across 1 vendorAsterisk

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 5%

Description

chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted frame.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

1.4.01.4.0 beta11.4.0 beta21.4.0 beta31.4.0 beta41.4.11.4.101.4.10.11.4.111.4.121.4.12.11.4.131.4.141.4.151.4.161.4.16.11.4.16.21.4.171.4.181.4.191.4.19 rc11.4.19 rc21.4.19 rc31.4.19 rc41.4.19.11.4.19.21.4.21.4.201.4.20 rc11.4.20 rc21.4.20 rc31.4.20.11.4.211.4.21 rc11.4.21 rc21.4.21.11.4.21.21.4.221.4.22 rc11.4.22 rc21.4.22 rc31.4.22 rc41.4.22 rc51.4.22.11.4.22.21.4.231.4.23 rc11.4.23 rc21.4.23 rc31.4.23 rc41.4.23.11.4.23.21.4.241.4.24 rc11.4.24.11.4.251.4.25 rc11.4.25.11.4.261.4.26 rc11.4.26 rc21.4.26 rc31.4.26 rc41.4.26 rc51.4.26 rc61.4.26.11.4.26.21.4.26.31.4.271.4.27 rc11.4.27 rc21.4.27 rc31.4.27 rc41.4.27 rc51.4.27.11.4.281.4.28 rc11.4.291.4.29 rc11.4.29.11.4.31.4.301.4.30 rc21.4.30 rc31.4.311.4.31 rc11.4.31 rc21.4.321.4.32 rc11.4.331.4.33 rc11.4.33 rc21.4.33.11.4.341.4.34 rc11.4.34 rc21.4.351.4.35 rc11.4.361.4.36 rc11.4.371.4.37 rc11.4.381.4.38 rc11.4.391.4.39 rc11.4.39.11.4.39.21.4.41.4.401.4.40 rc11.4.40 rc21.4.40 rc31.4.40.11.4.40.21.4.411.4.41 rc11.4.51.4.61.4.71.4.7.11.4.81.4.91.6.2.01.6.2.0 rc21.6.2.0 rc31.6.2.0 rc41.6.2.0 rc51.6.2.0 rc61.6.2.0 rc71.6.2.0 rc81.6.2.11.6.2.1 rc11.6.2.15 rc11.6.2.161.6.2.16 rc11.6.2.16.11.6.2.16.21.6.2.171.6.2.17 rc11.6.2.17 rc21.6.2.17 rc31.6.2.17.11.6.2.17.21.6.2.17.31.6.2.181.6.2.18 rc11.6.2.21.6.2.3 rc21.6.2.41.6.2.51.6.2.61.6.2.6 rc11.6.2.6 rc21.8.01.8.0 beta11.8.0 beta21.8.0 beta31.8.0 beta41.8.0 beta51.8.0 rc21.8.0 rc31.8.0 rc41.8.0 rc51.8.11.8.1 rc11.8.1.11.8.1.21.8.21.8.2.11.8.2.21.8.2.31.8.2.41.8.31.8.3 rc11.8.3 rc21.8.3 rc31.8.3.11.8.3.21.8.3.31.8.41.8.4 rc11.8.4 rc21.8.4 rc31.8.4.11.8.4.2c.3.0c.3.1.0c.3.1.1c.3.2.2c.3.2.3c.3.3.2c.3.6.2c.3.6.3c.3.6.4

References (12)

Third Party Advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/44973
Third Party Advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/45048
Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/45201
Third Party Advisoryx_refsource_SECUNIA
http://secunia.com/advisories/45239
VDB Entryx_refsource_SECTRACK
http://securitytracker.com/id?1025708

CVSS

Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card