CVE-2011-2535

CVE-2011-2535 describes a denial-of-service vulnerability in the IAX2 channel driver (chan_iax2.c) of Asterisk Open Source versions 1.4.x, 1.6.2.x, and 1.8.x, as well as Asterisk Business Edition C.3. A remote attacker can exploit this by sending a crafted option control frame, causing the Asterisk daemon to crash and potentially leading to other unspecified impacts. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, primarily resulting in a denial of service. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a low level of public awareness or concern.