asterisk vulnerabilities (Ubuntu)
109 vulnerabilities.
-
asteriskUbuntu Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers 2.3 Low -
asteriskUbuntu Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location 6.9 Medium -
asteriskUbuntu Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field 7.0 High -
asteriskUbuntu Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing 8.2 High -
asteriskUbuntu Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch 6.0 Medium -
asteriskUbuntu Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser 7.5 High -
asteriskUbuntu Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE 7.5 High -
asteriskUbuntu Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication 7.5 High -
asteriskUbuntu Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes 8.1 High -
asteriskUbuntu Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling 7.1 High -
asteriskUbuntu Asterisk: Possible RED T.140 Generation Accumulation OOB Write 2.3 Low -
asteriskUbuntu Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer 7.5 High -
asteriskUbuntu Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk 5.9 Medium -
asteriskUbuntu Asterisk: Possible RED T.140 Heap Buffer Overflow 2.3 Low -
asteriskUbuntu Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser 6.5 Medium -
asteriskUbuntu Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex) 7.7 High -
asteriskUbuntu Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon) 6.3 Medium -
asteriskUbuntu Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure) 6.9 Medium -
asteriskUbuntu Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing 7.1 High -
asteriskUbuntu Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages 2.3 Low -
asteriskUbuntu PJSIP: TLS server identity (hostname) verification bypass via embedded NUL in certificate SubjectAltName (OpenSSL and GnuTLS backends) 7.4 High -
asteriskUbuntu PJSIP: Heap buffer overflow in the AVI parser 6.9 Medium -
asteriskUbuntu PJSIP: Pre-authentication overflow in the telnet CLI error 6.3 Medium -
asteriskUbuntu PJSIP: Pre-authentication overflow in the telnet CLI history 6.3 Medium -
asteriskUbuntu PJSIP: Heap overflow in the HTTP client 8.3 High -
asteriskUbuntu PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend 8.8 High -
asteriskUbuntu PJSIP: Stack overflow parsing SDP a=crypto attributes 8.8 High -
asteriskUbuntu PJSIP: Stack overflow handling Service-Route headers in a registration response 8.8 High -
asteriskUbuntu PJSIP: SIP message header buffer overflow 6.9 Medium -
asteriskUbuntu PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance 8.4 High -
asteriskUbuntu GnuTLS backend silently skips certificate chain verification when verify_peer is false 8.2 High -
asteriskUbuntu PJSIP: Asymmetric ptime integer overflow in Media Stream 8.1 High -
asteriskUbuntu PJSIP: SIP Multipart CID URI Length Underflow 6.7 Medium -
asteriskUbuntu PJSIP: Stack buffer overflow in pjsip_auth_create_digest2() 8.1 High -
asteriskUbuntu PJSIP: Heap buffer overflow in Opus codec decoding 8.5 High -
asteriskUbuntu ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation 0.0 None -
asteriskUbuntu Asterisk vulnerable to potential privilege escalation 0.0 None -
asteriskUbuntu Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection 2.0 Low -
asteriskUbuntu The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization 3.5 Low -
asteriskUbuntu Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation 7.0 High -
asteriskUbuntu Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request 7.5 High -
asteriskUbuntu Asterisk remotely exploitable leak of RTP UDP ports and internal resources 6.5 Medium -
asteriskUbuntu Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation 6.5 Medium -
asteriskUbuntu cli_permissions.conf: deny option does not work for disallowing shell commands 4.8 Medium -
asteriskUbuntu Using malformed From header can forge identity with ";" or NULL in name portion 7.7 High -
asteriskUbuntu Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary... 9.8 Critical -
asteriskUbuntu An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0... 5.5 Medium -
asteriskUbuntu A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used 5.7 Medium -
asteriskUbuntu Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan 7.4 High -
asteriskUbuntu Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests 5.8 Medium - Show olderLoading…