asterisk vulnerabilities (Debian)
231 vulnerabilities.
asteriskDebianAsterisk can crash from a specifically malformed Authorization header in an incoming SIP request7.5 HighasteriskDebianAsterisk remotely exploitable leak of RTP UDP ports and internal resources6.5 MediumasteriskDebianAsterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation6.5 MediumasteriskDebiancli_permissions.conf: deny option does not work for disallowing shell commands4.8 MediumasteriskDebianUsing malformed From header can forge identity with ";" or NULL in name portion7.7 HighasteriskDebianInsecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary...9.8 CriticalasteriskDebianAn issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0...5.5 MediumasteriskDebianA malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used5.7 MediumasteriskDebianAsterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan7.4 HighasteriskDebianAsterisk susceptible to Denial of Service via DTLS Hello packets during call initiation7.5 HighasteriskDebianAsterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'7.5 HighasteriskDebianAsterisk Path Traversal vulnerability4.9 MediumasteriskDebianPJSIP has use-after-free vulnerability in SRTP media transport9.8 CriticalasteriskDebianasterisk - security update7.5 HighasteriskDebianHeap buffer overflow in pjproject when decoding STUN message6.5 MediumasteriskDebianPJSIP vulnerable to heap buffer overflow when decoding STUN message6.5 MediumasteriskDebianAn issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19...4.9 MediumasteriskDebianA use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9...6.5 MediumasteriskDebianIn Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an...7.5 HighasteriskDebianMedia transport downgrade from the secure version (SRTP) to non-secure (RTP) in pjsip9.1 CriticalasteriskDebianBuffer overflow in pjlib scanner and pjmedia7.5 HighasteriskDebianres_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2...6.5 MediumasteriskDebianPotential stack buffer overflow when parsing message as a STUN client9.8 CriticalasteriskDebianPotential infinite loop when parsing WAV format file in PJSIP7.5 HighasteriskDebianAn issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The...9.8 CriticalasteriskDebianAn SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to...9.1 CriticalasteriskDebianAn issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to...7.5 HighasteriskDebianPotential heap buffer overflow when parsing DNS packets in PJSIP7.5 HighasteriskDebianPotential out-of-bound read/write in PJSIP9.8 CriticalasteriskDebianInfinite Loop in PJSIP7.5 HighasteriskDebianStack buffer overflow in pjproject7.5 HighasteriskDebianUse after free in PJSIP8.1 HighasteriskDebianBuffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer'...9.8 CriticalasteriskDebianRead out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled ...9.1 CriticalasteriskDebianStack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled ...9.8 CriticalasteriskDebianStack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename'...9.8 CriticalasteriskDebianStack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename'...9.8 CriticalasteriskDebianOut-of-bounds read in multipart parsing in PJSIP9.1 CriticalasteriskDebianPotential out-of-bound read during RTP/RTCP parsing in PJSIP9.1 CriticalasteriskDebianPrevent out-of-bounds read in PJSIP8.2 HighasteriskDebianOut-of-bounds read when parsing RTCP BYE message in PJSIP7.3 HighasteriskDebianPotential integer underflow upon receiving STUN message in PJSIP7.3 HighasteriskDebianAn issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before...7.5 HighasteriskDebianDenial of Service in PJSIP5.9 MediumasteriskDebianA buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1,...6.5 MediumasteriskDebianAn issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x,...5.9 MediumasteriskDebianAn issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x...7.5 HighasteriskDebianAn issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through...6.5 MediumasteriskDebianA res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before...5.3 MediumasteriskDebianAn issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x...6.5 Medium- Show moreLoading…