Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2011-1147

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Digium Asterisk是美国Digium公司的一套开源的电话交换机（PBX）系统软件。该软件支持语音信箱、多方语音会议、交互式语音应答(IVR)等。 Asterisk Open Source；Business Edition；AsteriskNOW；以及s800i（Asterisk Appliance）中存在缓冲区溢出漏洞。该漏洞是由于在main/udptl.c文件中的"decode_open_type()"和"udptl_rx_packet()"函数中存在的边界错误导致的。这些漏洞可以通过向服务

AI Predicted 7.5 Difficulty: Moderate EPSS 3.52% · P88
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2011-1147

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i (Asterisk Appliance), when T.38 support is enabled, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted UDPTL packet.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Digium Asterisk UDPTL缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Digium Asterisk是美国Digium公司的一套开源的电话交换机（PBX）系统软件。该软件支持语音信箱、多方语音会议、交互式语音应答(IVR)等。 Asterisk Open Source；Business Edition；AsteriskNOW；以及s800i（Asterisk Appliance）中存在缓冲区溢出漏洞。该漏洞是由于在main/udptl.c文件中的"decode_open_type()"和"udptl_rx_packet()"函数中存在的边界错误导致的。这些漏洞可以通过向服务
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2011-1147

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2011-1147

请登录查看更多情报信息。

Vendor Advisories for CVE-2011-1147 (6)

Mailing List Discussions for CVE-2011-1147 (5)

Other References for CVE-2011-1147 (1)

Same Patch Batch · n/a · 2011-03-15 · 11 CVEs total

CVE-2010-4757 e107 submitnews.php跨站脚本攻击漏洞
CVE-2011-0001 Open-iSCSI targetcli-fb 资源管理错误漏洞
CVE-2011-0063 Majordomo 2 lib/Majordomo.pm _list_file_get函数路径遍历漏洞
CVE-2011-0438 Arthur de Jong nss-pam-ldapd nslcd/pam.c认证绕过漏洞
CVE-2011-0457 e107跨站脚本攻击漏洞
CVE-2011-0609 Adobe Flash Player/Reader/Acrobat SWF文件内存破坏漏洞
CVE-2011-0695 Linux kernel InfiniBand驱动程序cm_work_handler函数竞争条件漏洞
CVE-2011-1092 PHP 'shmop_read()'整数溢出漏洞
CVE-2011-1146 Red Hat libvirt API libvirt.c拒绝服务漏洞
CVE-2011-1427 Kodak InSite多个跨站脚本攻击漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2011-1147

No comments yet

Leave a comment