Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Asterisk may stop working if automon is enabled

CVE-2011-4598 · published 14 years ago
Summary

Versions of Asterisk 1.6.2 before 1.6.2.21 and 1.8 before 1.8.7.2 have a bug that can be triggered when the 'automon' feature is turned on. An attacker who can send specially crafted call‑setup messages can cause the Asterisk service to crash, stopping phone calls. Update to the newer versions or turn off the automon feature to protect your system.

What to do
  • Update debian asterisk to version 1:1.8.8.0~dfsg-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:14 debian asterisk < 1:1.8.8.0~dfsg-1
Fix: upgrade to 1:1.8.8.0~dfsg-1
– digium asterisk 1.8.0
1.8.1
1.8.1.1
1.8.1.2
1.8.2
1.8.2.1
1.8.2.2
1.8.2.3
1.8.2.4
1.8.3
1.8.3.1
1.8.3.2
30 more version ranges
cpe:2.3:a:digium:asterisk:1.8.0:*:*:*:*:*:*:*
Original advisory text
The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial ...
The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted sequence of SIP requests.
References
Severity
4.3 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published15 Dec 2011
Updated29 Oct 2026
First seen11 Sep 2026
Sources
DEBIAN-CVE-2011-4598 · OSV
CVE-2011-4598 · NVD
Track software like this
Free during beta