Skip to content
Asterisk vulnerabilities
Newest
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers
CVE-2026-57199
Fix available
2.3 Low
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location
CVE-2026-57203
Fix available
6.9 Medium
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field
CVE-2026-57190
Fix available
7.0 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
CVE-2026-57191
Fix available
8.2 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch
CVE-2026-57192
Fix available
6.0 Medium
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
CVE-2026-57186
Fix available
7.5 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE
CVE-2026-57200
Fix available
7.5 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication
CVE-2026-57195
Fix available
7.5 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
CVE-2026-57202
Fix available
8.1 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling
CVE-2026-57188
Fix available
7.1 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Possible RED T.140 Generation Accumulation OOB Write
CVE-2026-57189
Fix available
2.3 Low
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
CVE-2026-57201
Fix available
7.5 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
CVE-2026-57194
Fix available
5.9 Medium
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Possible RED T.140 Heap Buffer Overflow
CVE-2026-57198
Fix available
2.3 Low
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
CVE-2026-57185
Fix available
6.5 Medium
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
CVE-2026-57197
Fix available
7.7 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)
CVE-2026-57184
Fix available
6.3 Medium
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)
CVE-2026-57193
Fix available
6.9 Medium
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing
CVE-2026-57187
Fix available
7.1 High
-
asterisk, asterisk certified-asterisk +1 more
Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages
CVE-2026-57196
Fix available
2.3 Low
-
asterisk, sangoma certified asterisk +1 more
ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalation
CVE-2026-23741
Fix available
0.0 None
-
asterisk, sangoma certified asterisk +1 more
Asterisk vulnerable to potential privilege escalation
CVE-2026-23740
Fix available
0.0 None
-
asterisk, sangoma certified asterisk +1 more
Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injection
CVE-2026-23739
Fix available
2.0 Low
-
asterisk, sangoma certified asterisk +1 more
The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization
CVE-2026-23738
Fix available
3.5 Low
-
asterisk, sangoma certified asterisk +1 more
Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation
CVE-2025-1131
Fix available
7.0 High
-
asterisk
Asterisk can crash from a specifically malformed Authorization header in an incoming SIP request
CVE-2025-57767
Fix available
7.5 High
-
asterisk, sangoma certified asterisk +1 more
Asterisk remotely exploitable leak of RTP UDP ports and internal resources
CVE-2025-54995
Fix available
6.5 Medium
-
asterisk, sangoma certified asterisk +1 more
Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation
CVE-2025-49832
Fix available
6.5 Medium
-
asterisk, sangoma certified asterisk +1 more
cli_permissions.conf: deny option does not work for disallowing shell commands
CVE-2025-47780
Fix available
4.8 Medium
-
asterisk, sangoma certified asterisk +1 more
Using malformed From header can forge identity with ";" or NULL in name portion
CVE-2025-47779
Fix available
7.7 High
-
asterisk, sangoma certified asterisk +1 more
A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used
CVE-2024-42491
Fix available
5.7 Medium
-
asterisk, asterisk certified asterisk +1 more
Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan
CVE-2024-42365
Public exploitFix available
7.4 High
-
asterisk
Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests
CVE-2024-35190
Fix available
5.8 Medium
-
asterisk, sangoma certified asterisk +1 more
Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation
CVE-2023-49786
Fix available
7.5 High
-
asterisk, sangoma certified asterisk +1 more
Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'
CVE-2023-37457
Fix available
7.5 High
-
asterisk, sangoma certified asterisk +1 more
Asterisk Path Traversal vulnerability
CVE-2023-49294
Fix available
EPSS 45.3%
4.9 Medium
-
asterisk certified asterisk, digium asterisk, debian linux +2 more
res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2...
CVE-2021-46837
Fix available
6.5 Medium
-
teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 more
Use after free in PJSIP
CVE-2022-23608
Fix available
8.1 High
-
teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 more
Out-of-bounds read in multipart parsing in PJSIP
CVE-2022-21723
Fix available
9.1 Critical
-
teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 more
Potential integer underflow upon receiving STUN message in PJSIP
CVE-2021-37706
Fix available
7.3 High
-
asterisk certified asterisk, sangoma asterisk, debian linux +1 more +3 more
An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x...
CVE-2020-28242
Fix available
6.5 Medium
-
asterisk, debian linux +1 more
asterisk allows calls on prohibited networks
CVE-2009-3723
Fix available
7.5 High
-
asterisk certified asterisk, sangoma asterisk +1 more
A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x...
CVE-2017-9358
Fix available
7.5 High
-
asterisk certified asterisk, digiumphones, open source +2 more
main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2...
CVE-2013-2686
Fix available
5.0 Medium
-
asterisk open source
Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11...
CVE-2013-2685
7.5 High
-
asterisk business edition, certified asterisk, digiumphones +1 more +3 more
The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11...
CVE-2013-2264
Fix available
5.0 Medium
-
asterisk business edition, certified asterisk, digiumphones +2 more +4 more
Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15...
CVE-2012-2186
Fix available
9.0 High
-
asterisk certified asterisk, open source, sangoma asterisk +2 more
chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1...
CVE-2012-2948
Fix available
4.0 Medium
-
asterisk open source
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x...
CVE-2012-2416
Fix available
6.5 Medium
-
asterisk open source
Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source...
CVE-2012-2415
Fix available
6.5 Medium
- Show olderLoading…