CVE-2011-2665

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a SIP packet with a Contact header that lacks a < (less than) character.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

No affected versions have been published.

Timeline

Published
Jul 6, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-26665.0The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not eCVE-2011-266710.0Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly CVE-2011-26688.8Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length headerCVE-2011-26696.5Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.CVE-2011-26706.1Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style SheetsCVE-2011-26717.5Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknowCVE-2011-26724.3Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web script or HTML via uCVE-2011-26734.3Cross-site scripting (XSS) vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspCVE-2011-26744.9BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated userCVE-2011-26754.3Cross-site scripting (XSS) vulnerability in Enkai-kun before 110916 allows remote attackers to inject arbitrary web script or HTML via unspeCVE-2011-26765.5The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not reqCVE-2011-26775.5Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time c
CVE-2011-2665: Medium severity, CVSS 5.0 | Vulnix