asterisk vulnerabilities (Debian)
231 vulnerabilities.
-
asteriskDebian Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers 2.3 Low -
asteriskDebian Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location 6.9 Medium -
asteriskDebian Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field 7.0 High -
asteriskDebian Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing 8.2 High -
asteriskDebian Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch 6.0 Medium -
asteriskDebian Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser 7.5 High -
asteriskDebian Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE 7.5 High -
asteriskDebian Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication 7.5 High -
asteriskDebian Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes 8.1 High -
asteriskDebian Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling 7.1 High -
asteriskDebian Asterisk: Possible RED T.140 Generation Accumulation OOB Write 2.3 Low -
asteriskDebian Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer 7.5 High -
asteriskDebian Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk 5.9 Medium -
asteriskDebian Asterisk: Possible RED T.140 Heap Buffer Overflow 2.3 Low -
asteriskDebian Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser 6.5 Medium -
asteriskDebian Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex) 7.7 High -
asteriskDebian Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon) 6.3 Medium -
asteriskDebian Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure) 6.9 Medium -
asteriskDebian Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing 7.1 High -
asteriskDebian Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages 2.3 Low -
asteriskDebian PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends) 7.4 High -
asteriskDebian PJSIP: Heap buffer overflow in the AVI parser 6.9 Medium -
asteriskDebian PJSIP: Pre-authentication overflow in the telnet CLI error 6.3 Medium -
asteriskDebian PJSIP: Pre-authentication overflow in the telnet CLI history 6.3 Medium -
asteriskDebian PJSIP: Heap overflow in the HTTP client 8.3 High -
asteriskDebian PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend 8.8 High -
asteriskDebian PJSIP: Stack overflow parsing SDP a=crypto attributes 8.8 High -
asteriskDebian PJSIP: Stack overflow handling Service-Route headers in a registration response 8.8 High -
asteriskDebian PJSIP: SIP message header buffer overflow 6.9 Medium -
asteriskDebian PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance 8.4 High -
asteriskDebian GnuTLS backend silently skips certificate chain verification when verify_peer is false 8.2 High -
asteriskDebian PJSIP: Asymmetric ptime integer overflow in Media Stream 8.1 High -
asteriskDebian PJSIP: SIP Multipart CID URI Length Underflow 6.7 Medium -
asteriskDebian PJSIP: Stack buffer overflow in pjsip_auth_create_digest2() 8.1 High -
asteriskDebian PJSIP: Heap buffer overflow in Opus codec decoding 8.5 High -
asteriskDebian PJSIP: Heap OOB read in VPX unpacketizer 6.9 Medium -
asteriskDebian PJSIP has an Out-of-bounds Read in SIP multipart parsing 6.9 Medium -
asteriskDebian PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser 8.4 High -
asteriskDebian PJSIP has ICE session use-after-free race conditions 8.0 High -
asteriskDebian PJSIP: Heap use-after-free in PJSIP presence subscription termination handler 8.7 High -
asteriskDebian PJSIP: Stack buffer overflow in Opus codec parser 8.7 High -
asteriskDebian PJSIP has a Heap-based Buffer Overflow vulnerability in its H.264 unpacketizer 8.1 High -
asteriskDebian PJSIP's pjmedia-video has use-after-free in H264 packetizer when packetizing fragmented NAL 5.1 Medium -
asteriskDebian PJSIP has a heap buffer overflow in ICE with long username 8.1 High -
asteriskDebian ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation 0.0 None -
asteriskDebian Asterisk vulnerable to potential privilege escalation 0.0 None -
asteriskDebian Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection 2.0 Low -
asteriskDebian The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization 3.5 Low -
asteriskDebian PJSIP is vulnerable to buffer overflow in Opus PLC 8.7 High -
asteriskDebian Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation 7.0 High - Show olderLoading…