Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2011-0495

Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary code via crafted caller ID data in vectors involving the (1) SIP channel driver, (2) URIENCODE dialplan function, or (3) AGI dialplan function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 63.5%
CVSS Severity
CVSS v2 Score 6.0
References
Products affected by CVE-2011-0495
  • Digium » Asterisk » Version: N/A
    cpe:2.3:a:digium:asterisk:-
  • Digium » Asterisk » Version: 1.2.0
    cpe:2.3:a:digium:asterisk:1.2.0
  • Digium » Asterisk » Version: 1.2.1
    cpe:2.3:a:digium:asterisk:1.2.1
  • Digium » Asterisk » Version: 1.2.10
    cpe:2.3:a:digium:asterisk:1.2.10
  • Digium » Asterisk » Version: 1.2.11
    cpe:2.3:a:digium:asterisk:1.2.11
  • Digium » Asterisk » Version: 1.2.12
    cpe:2.3:a:digium:asterisk:1.2.12
  • Digium » Asterisk » Version: 1.2.12.1
    cpe:2.3:a:digium:asterisk:1.2.12.1
  • Digium » Asterisk » Version: 1.2.13
    cpe:2.3:a:digium:asterisk:1.2.13
  • Digium » Asterisk » Version: 1.2.14
    cpe:2.3:a:digium:asterisk:1.2.14
  • Digium » Asterisk » Version: 1.2.15
    cpe:2.3:a:digium:asterisk:1.2.15
  • Digium » Asterisk » Version: 1.2.16
    cpe:2.3:a:digium:asterisk:1.2.16
  • Digium » Asterisk » Version: 1.2.17
    cpe:2.3:a:digium:asterisk:1.2.17
  • Digium » Asterisk » Version: 1.2.18
    cpe:2.3:a:digium:asterisk:1.2.18
  • Digium » Asterisk » Version: 1.2.19
    cpe:2.3:a:digium:asterisk:1.2.19
  • Digium » Asterisk » Version: 1.2.2
    cpe:2.3:a:digium:asterisk:1.2.2
  • Digium » Asterisk » Version: 1.2.20
    cpe:2.3:a:digium:asterisk:1.2.20
  • Digium » Asterisk » Version: 1.2.21
    cpe:2.3:a:digium:asterisk:1.2.21
  • Digium » Asterisk » Version: 1.2.21.1
    cpe:2.3:a:digium:asterisk:1.2.21.1
  • Digium » Asterisk » Version: 1.2.22
    cpe:2.3:a:digium:asterisk:1.2.22
  • Digium » Asterisk » Version: 1.2.23
    cpe:2.3:a:digium:asterisk:1.2.23
  • Digium » Asterisk » Version: 1.2.24
    cpe:2.3:a:digium:asterisk:1.2.24
  • Digium » Asterisk » Version: 1.2.25
    cpe:2.3:a:digium:asterisk:1.2.25
  • Digium » Asterisk » Version: 1.2.26
    cpe:2.3:a:digium:asterisk:1.2.26
  • Digium » Asterisk » Version: 1.2.26.1
    cpe:2.3:a:digium:asterisk:1.2.26.1
  • Digium » Asterisk » Version: 1.2.26.2
    cpe:2.3:a:digium:asterisk:1.2.26.2
  • Digium » Asterisk » Version: 1.2.27
    cpe:2.3:a:digium:asterisk:1.2.27
  • Digium » Asterisk » Version: 1.2.28
    cpe:2.3:a:digium:asterisk:1.2.28
  • Digium » Asterisk » Version: 1.2.28.1
    cpe:2.3:a:digium:asterisk:1.2.28.1
  • Digium » Asterisk » Version: 1.2.29
    cpe:2.3:a:digium:asterisk:1.2.29
  • Digium » Asterisk » Version: 1.2.3
    cpe:2.3:a:digium:asterisk:1.2.3
  • Digium » Asterisk » Version: 1.2.30
    cpe:2.3:a:digium:asterisk:1.2.30
  • Digium » Asterisk » Version: 1.2.30.1
    cpe:2.3:a:digium:asterisk:1.2.30.1
  • Digium » Asterisk » Version: 1.2.30.2
    cpe:2.3:a:digium:asterisk:1.2.30.2
  • Digium » Asterisk » Version: 1.2.30.3
    cpe:2.3:a:digium:asterisk:1.2.30.3
  • Digium » Asterisk » Version: 1.2.30.4
    cpe:2.3:a:digium:asterisk:1.2.30.4
  • Digium » Asterisk » Version: 1.2.31
    cpe:2.3:a:digium:asterisk:1.2.31
  • Digium » Asterisk » Version: 1.2.31.1
    cpe:2.3:a:digium:asterisk:1.2.31.1
  • Digium » Asterisk » Version: 1.2.31.2
    cpe:2.3:a:digium:asterisk:1.2.31.2
  • Digium » Asterisk » Version: 1.2.32
    cpe:2.3:a:digium:asterisk:1.2.32
  • Digium » Asterisk » Version: 1.2.33
    cpe:2.3:a:digium:asterisk:1.2.33
  • Digium » Asterisk » Version: 1.2.34
    cpe:2.3:a:digium:asterisk:1.2.34
  • Digium » Asterisk » Version: 1.2.35
    cpe:2.3:a:digium:asterisk:1.2.35
  • Digium » Asterisk » Version: 1.2.36
    cpe:2.3:a:digium:asterisk:1.2.36
  • Digium » Asterisk » Version: 1.2.37
    cpe:2.3:a:digium:asterisk:1.2.37
  • Digium » Asterisk » Version: 1.2.38
    cpe:2.3:a:digium:asterisk:1.2.38
  • Digium » Asterisk » Version: 1.2.39
    cpe:2.3:a:digium:asterisk:1.2.39
  • Digium » Asterisk » Version: 1.2.4
    cpe:2.3:a:digium:asterisk:1.2.4
  • Digium » Asterisk » Version: 1.2.40
    cpe:2.3:a:digium:asterisk:1.2.40
  • Digium » Asterisk » Version: 1.2.5
    cpe:2.3:a:digium:asterisk:1.2.5
  • Digium » Asterisk » Version: 1.2.6
    cpe:2.3:a:digium:asterisk:1.2.6
  • Digium » Asterisk » Version: 1.2.7
    cpe:2.3:a:digium:asterisk:1.2.7
  • Digium » Asterisk » Version: 1.2.7.1
    cpe:2.3:a:digium:asterisk:1.2.7.1
  • Digium » Asterisk » Version: 1.2.8
    cpe:2.3:a:digium:asterisk:1.2.8
  • Digium » Asterisk » Version: 1.2.9
    cpe:2.3:a:digium:asterisk:1.2.9
  • Digium » Asterisk » Version: 1.2.9.1
    cpe:2.3:a:digium:asterisk:1.2.9.1
  • Digium » Asterisk » Version: 1.4.0
    cpe:2.3:a:digium:asterisk:1.4.0
  • Digium » Asterisk » Version: 1.4.1
    cpe:2.3:a:digium:asterisk:1.4.1
  • Digium » Asterisk » Version: 1.4.10
    cpe:2.3:a:digium:asterisk:1.4.10
  • Digium » Asterisk » Version: 1.4.10.1
    cpe:2.3:a:digium:asterisk:1.4.10.1
  • Digium » Asterisk » Version: 1.4.11
    cpe:2.3:a:digium:asterisk:1.4.11
  • Digium » Asterisk » Version: 1.4.12
    cpe:2.3:a:digium:asterisk:1.4.12
  • Digium » Asterisk » Version: 1.4.12.1
    cpe:2.3:a:digium:asterisk:1.4.12.1
  • Digium » Asterisk » Version: 1.4.13
    cpe:2.3:a:digium:asterisk:1.4.13
  • Digium » Asterisk » Version: 1.4.14
    cpe:2.3:a:digium:asterisk:1.4.14
  • Digium » Asterisk » Version: 1.4.15
    cpe:2.3:a:digium:asterisk:1.4.15
  • Digium » Asterisk » Version: 1.4.16
    cpe:2.3:a:digium:asterisk:1.4.16
  • Digium » Asterisk » Version: 1.4.16.1
    cpe:2.3:a:digium:asterisk:1.4.16.1
  • Digium » Asterisk » Version: 1.4.16.2
    cpe:2.3:a:digium:asterisk:1.4.16.2
  • Digium » Asterisk » Version: 1.4.17
    cpe:2.3:a:digium:asterisk:1.4.17
  • Digium » Asterisk » Version: 1.4.18
    cpe:2.3:a:digium:asterisk:1.4.18
  • Digium » Asterisk » Version: 1.4.18.1
    cpe:2.3:a:digium:asterisk:1.4.18.1
  • Digium » Asterisk » Version: 1.4.19
    cpe:2.3:a:digium:asterisk:1.4.19
  • Digium » Asterisk » Version: 1.4.19.1
    cpe:2.3:a:digium:asterisk:1.4.19.1
  • Digium » Asterisk » Version: 1.4.19.2
    cpe:2.3:a:digium:asterisk:1.4.19.2
  • Digium » Asterisk » Version: 1.4.2
    cpe:2.3:a:digium:asterisk:1.4.2
  • Digium » Asterisk » Version: 1.4.20
    cpe:2.3:a:digium:asterisk:1.4.20
  • Digium » Asterisk » Version: 1.4.20.1
    cpe:2.3:a:digium:asterisk:1.4.20.1
  • Digium » Asterisk » Version: 1.4.21
    cpe:2.3:a:digium:asterisk:1.4.21
  • Digium » Asterisk » Version: 1.4.21.1
    cpe:2.3:a:digium:asterisk:1.4.21.1
  • Digium » Asterisk » Version: 1.4.21.2
    cpe:2.3:a:digium:asterisk:1.4.21.2
  • Digium » Asterisk » Version: 1.4.22
    cpe:2.3:a:digium:asterisk:1.4.22
  • Digium » Asterisk » Version: 1.4.22.1
    cpe:2.3:a:digium:asterisk:1.4.22.1
  • Digium » Asterisk » Version: 1.4.22.2
    cpe:2.3:a:digium:asterisk:1.4.22.2
  • Digium » Asterisk » Version: 1.4.23
    cpe:2.3:a:digium:asterisk:1.4.23
  • Digium » Asterisk » Version: 1.4.23.1
    cpe:2.3:a:digium:asterisk:1.4.23.1
  • Digium » Asterisk » Version: 1.4.23.2
    cpe:2.3:a:digium:asterisk:1.4.23.2
  • Digium » Asterisk » Version: 1.4.24
    cpe:2.3:a:digium:asterisk:1.4.24
  • Digium » Asterisk » Version: 1.4.24.1
    cpe:2.3:a:digium:asterisk:1.4.24.1
  • Digium » Asterisk » Version: 1.4.25
    cpe:2.3:a:digium:asterisk:1.4.25
  • Digium » Asterisk » Version: 1.4.25.1
    cpe:2.3:a:digium:asterisk:1.4.25.1
  • Digium » Asterisk » Version: 1.4.26
    cpe:2.3:a:digium:asterisk:1.4.26
  • Digium » Asterisk » Version: 1.4.26.1
    cpe:2.3:a:digium:asterisk:1.4.26.1
  • Digium » Asterisk » Version: 1.4.26.2
    cpe:2.3:a:digium:asterisk:1.4.26.2
  • Digium » Asterisk » Version: 1.4.26.3
    cpe:2.3:a:digium:asterisk:1.4.26.3
  • Digium » Asterisk » Version: 1.4.27
    cpe:2.3:a:digium:asterisk:1.4.27
  • Digium » Asterisk » Version: 1.4.27.1
    cpe:2.3:a:digium:asterisk:1.4.27.1
  • Digium » Asterisk » Version: 1.4.28
    cpe:2.3:a:digium:asterisk:1.4.28
  • Digium » Asterisk » Version: 1.4.29
    cpe:2.3:a:digium:asterisk:1.4.29
  • Digium » Asterisk » Version: 1.4.29.1
    cpe:2.3:a:digium:asterisk:1.4.29.1
  • Digium » Asterisk » Version: 1.4.3
    cpe:2.3:a:digium:asterisk:1.4.3
  • Digium » Asterisk » Version: 1.4.30
    cpe:2.3:a:digium:asterisk:1.4.30
  • Digium » Asterisk » Version: 1.4.31
    cpe:2.3:a:digium:asterisk:1.4.31
  • Digium » Asterisk » Version: 1.4.32
    cpe:2.3:a:digium:asterisk:1.4.32
  • Digium » Asterisk » Version: 1.4.33
    cpe:2.3:a:digium:asterisk:1.4.33
  • Digium » Asterisk » Version: 1.4.33.1
    cpe:2.3:a:digium:asterisk:1.4.33.1
  • Digium » Asterisk » Version: 1.4.34
    cpe:2.3:a:digium:asterisk:1.4.34
  • Digium » Asterisk » Version: 1.4.35
    cpe:2.3:a:digium:asterisk:1.4.35
  • Digium » Asterisk » Version: 1.4.36
    cpe:2.3:a:digium:asterisk:1.4.36
  • Digium » Asterisk » Version: 1.4.37
    cpe:2.3:a:digium:asterisk:1.4.37
  • Digium » Asterisk » Version: 1.4.37.1
    cpe:2.3:a:digium:asterisk:1.4.37.1
  • Digium » Asterisk » Version: 1.4.38
    cpe:2.3:a:digium:asterisk:1.4.38
  • Digium » Asterisk » Version: 1.4.39
    cpe:2.3:a:digium:asterisk:1.4.39
  • Digium » Asterisk » Version: 1.4.4
    cpe:2.3:a:digium:asterisk:1.4.4
  • Digium » Asterisk » Version: 1.4.5
    cpe:2.3:a:digium:asterisk:1.4.5
  • Digium » Asterisk » Version: 1.4.6
    cpe:2.3:a:digium:asterisk:1.4.6
  • Digium » Asterisk » Version: 1.4.7
    cpe:2.3:a:digium:asterisk:1.4.7
  • Digium » Asterisk » Version: 1.4.7.1
    cpe:2.3:a:digium:asterisk:1.4.7.1
  • Digium » Asterisk » Version: 1.4.8
    cpe:2.3:a:digium:asterisk:1.4.8
  • Digium » Asterisk » Version: 1.4.9
    cpe:2.3:a:digium:asterisk:1.4.9
  • Digium » Asterisk » Version: 1.6.1
    cpe:2.3:a:digium:asterisk:1.6.1
  • Digium » Asterisk » Version: 1.6.1.0
    cpe:2.3:a:digium:asterisk:1.6.1.0
  • Digium » Asterisk » Version: 1.6.1.1
    cpe:2.3:a:digium:asterisk:1.6.1.1
  • Digium » Asterisk » Version: 1.6.1.10
    cpe:2.3:a:digium:asterisk:1.6.1.10
  • Digium » Asterisk » Version: 1.6.1.11
    cpe:2.3:a:digium:asterisk:1.6.1.11
  • Digium » Asterisk » Version: 1.6.1.12
    cpe:2.3:a:digium:asterisk:1.6.1.12
  • Digium » Asterisk » Version: 1.6.1.13
    cpe:2.3:a:digium:asterisk:1.6.1.13
  • Digium » Asterisk » Version: 1.6.1.14
    cpe:2.3:a:digium:asterisk:1.6.1.14
  • Digium » Asterisk » Version: 1.6.1.15
    cpe:2.3:a:digium:asterisk:1.6.1.15
  • Digium » Asterisk » Version: 1.6.1.16
    cpe:2.3:a:digium:asterisk:1.6.1.16
  • Digium » Asterisk » Version: 1.6.1.17
    cpe:2.3:a:digium:asterisk:1.6.1.17
  • Digium » Asterisk » Version: 1.6.1.18
    cpe:2.3:a:digium:asterisk:1.6.1.18
  • Digium » Asterisk » Version: 1.6.1.19
    cpe:2.3:a:digium:asterisk:1.6.1.19
  • Digium » Asterisk » Version: 1.6.1.2
    cpe:2.3:a:digium:asterisk:1.6.1.2
  • Digium » Asterisk » Version: 1.6.1.20
    cpe:2.3:a:digium:asterisk:1.6.1.20
  • Digium » Asterisk » Version: 1.6.1.3
    cpe:2.3:a:digium:asterisk:1.6.1.3
  • Digium » Asterisk » Version: 1.6.1.4
    cpe:2.3:a:digium:asterisk:1.6.1.4
  • Digium » Asterisk » Version: 1.6.1.5
    cpe:2.3:a:digium:asterisk:1.6.1.5
  • Digium » Asterisk » Version: 1.6.1.6
    cpe:2.3:a:digium:asterisk:1.6.1.6
  • Digium » Asterisk » Version: 1.6.1.7
    cpe:2.3:a:digium:asterisk:1.6.1.7
  • Digium » Asterisk » Version: 1.6.1.8
    cpe:2.3:a:digium:asterisk:1.6.1.8
  • Digium » Asterisk » Version: 1.6.1.9
    cpe:2.3:a:digium:asterisk:1.6.1.9
  • Digium » Asterisk » Version: 1.6.2.0
    cpe:2.3:a:digium:asterisk:1.6.2.0
  • Digium » Asterisk » Version: 1.6.2.1
    cpe:2.3:a:digium:asterisk:1.6.2.1
  • Digium » Asterisk » Version: 1.6.2.10
    cpe:2.3:a:digium:asterisk:1.6.2.10
  • Digium » Asterisk » Version: 1.6.2.11
    cpe:2.3:a:digium:asterisk:1.6.2.11
  • Digium » Asterisk » Version: 1.6.2.12
    cpe:2.3:a:digium:asterisk:1.6.2.12
  • Digium » Asterisk » Version: 1.6.2.13
    cpe:2.3:a:digium:asterisk:1.6.2.13
  • Digium » Asterisk » Version: 1.6.2.14
    cpe:2.3:a:digium:asterisk:1.6.2.14
  • Digium » Asterisk » Version: 1.6.2.15
    cpe:2.3:a:digium:asterisk:1.6.2.15
  • Digium » Asterisk » Version: 1.6.2.16
    cpe:2.3:a:digium:asterisk:1.6.2.16
  • Digium » Asterisk » Version: 1.6.2.2
    cpe:2.3:a:digium:asterisk:1.6.2.2
  • Digium » Asterisk » Version: 1.6.2.3
    cpe:2.3:a:digium:asterisk:1.6.2.3
  • Digium » Asterisk » Version: 1.6.2.4
    cpe:2.3:a:digium:asterisk:1.6.2.4
  • Digium » Asterisk » Version: 1.6.2.5
    cpe:2.3:a:digium:asterisk:1.6.2.5
  • Digium » Asterisk » Version: 1.6.2.6
    cpe:2.3:a:digium:asterisk:1.6.2.6
  • Digium » Asterisk » Version: 1.6.2.7
    cpe:2.3:a:digium:asterisk:1.6.2.7
  • Digium » Asterisk » Version: 1.6.2.8
    cpe:2.3:a:digium:asterisk:1.6.2.8
  • Digium » Asterisk » Version: 1.6.2.9
    cpe:2.3:a:digium:asterisk:1.6.2.9
  • Digium » Asterisk » Version: 1.8.0
    cpe:2.3:a:digium:asterisk:1.8.0
  • Digium » Asterisk » Version: 1.8.1
    cpe:2.3:a:digium:asterisk:1.8.1
  • Digium » Asterisk » Version: 1.8.1.1
    cpe:2.3:a:digium:asterisk:1.8.1.1
  • Digium » Asterisk » Version: 1.8.2
    cpe:2.3:a:digium:asterisk:1.8.2
  • Digium » Asterisk » Version: 1.8.2.1
    cpe:2.3:a:digium:asterisk:1.8.2.1
  • Digium » Asterisk » Version: 3.6.2
    cpe:2.3:a:digium:asterisk:3.6.2
  • Digium » Asterisk » Version: b.2.3.0
    cpe:2.3:a:digium:asterisk:b.2.3.0
  • Digium » Asterisk » Version: b.2.3.4
    cpe:2.3:a:digium:asterisk:b.2.3.4
  • Digium » Asterisk » Version: c.1.0
    cpe:2.3:a:digium:asterisk:c.1.0
  • Digium » Asterisknow » Version: 1.5
    cpe:2.3:a:digium:asterisknow:1.5
  • Digium » S800i » Version: N/A
    cpe:2.3:h:digium:s800i:-
  • Debian » Debian Linux » Version: 6.0
    cpe:2.3:o:debian:debian_linux:6.0
  • Digium » S800i Firmware » Version: 1.2.0
    cpe:2.3:o:digium:s800i_firmware:1.2.0
  • Fedoraproject » Fedora » Version: 13
    cpe:2.3:o:fedoraproject:fedora:13
  • Fedoraproject » Fedora » Version: 14
    cpe:2.3:o:fedoraproject:fedora:14


Contact Us

Shodan ® - All rights reserved