Unscored severity · published Jan 20, 2011
CVE-2011-0495
Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.;…
–
CVSS
4.2%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary code via crafted caller ID data in vectors involving the (1) SIP channel driver, (2) URIENCODE dialplan function, or (3) AGI dialplan function.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Asterisk · Digium
before c.3.6.2; 1.2.0 through 1.2.40; 1.4.0 before 1.4.38.1; 1.4.39 before 1.4.39.1; 1.6.1 before 1.6.1.21; 1.6.2 before 1.6.2.15.1; +3 more · source: NVD
AS
Asterisknow · Digium
1.5 · source: NVD
DL
Debian Linux · Debian
6.0 · source: NVD
FE
Fedora · Fedoraproject
13; 14 · source: NVD
SF
S800i Firmware · Digium
1.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0495
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0495
Patch
http://downloads.asterisk.org/pub/security/AST-2011-001-1.6.2.diff
Vendor Advisory
http://downloads.asterisk.org/pub/security/AST-2011-001.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053689.html
Third Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2011-February/053713.html
Broken Link
http://osvdb.org/70518
Third Party Advisory
http://secunia.com/advisories/42935
More from Debian Linux
10.0
CVE-2025-32433
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
10.0
CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2026-111497
Out-of-Bounds Write in Google Brotli Decoder