DEBIAN-CVE-2011-2535
- Source
- https://security-tracker.debian.org/tracker/CVE-2011-2535
- Import Source
- https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2011-2535.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2011-2535
- Upstream
- Published
- 2011-07-06T19:55:03Z
- Modified
- 2025-09-19T06:02:51Z
- Summary
- [none]
- Details
-
chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted frame.
- References
Affected packages
Debian:11 / asterisk
Package
- Name
- asterisk
- Purl
- pkg:deb/debian/asterisk?arch=source