Unrated severityNVD Advisory· Published Oct 21, 2011· Updated Apr 29, 2026
CVE-2011-4063
CVE-2011-4063
Description
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service (daemon crash) via a malformed request.
Affected products
2cpe:2.3:a:asterisk:open_source:10.0.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:asterisk:open_source:10.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:asterisk:open_source:1.8.7:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- downloads.digium.com/pub/security/AST-2011-012.htmlnvdVendor Advisory
- secunia.com/advisories/46420nvd
- securityreason.com/securityalert/8478nvd
- www.securityfocus.com/archive/1/520141/100/0/threadednvd
- www.securityfocus.com/bid/50177nvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/70706nvd
News mentions
0No linked articles in our index yet.