Asterisk Certified Asterisk vulnerabilities

• asterisk, asterisk certified asterisk +1 more Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan CVE-2024-42365 Public exploitFix available 7.4 HighAugust 8, 2024
• asterisk certified asterisk, digium asterisk, debian linux +2 more res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2... CVE-2021-46837 Fix available 6.5 MediumAugust 30, 2022
• teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 more Use after free in PJSIP CVE-2022-23608 Fix available 8.1 HighFebruary 22, 2022
• teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 more Out-of-bounds read in multipart parsing in PJSIP CVE-2022-21723 Fix available 9.1 CriticalJanuary 27, 2022
• teluu pjsip, asterisk certified asterisk, debian linux +2 more +4 more Potential integer underflow upon receiving STUN message in PJSIP CVE-2021-37706 Fix available 7.3 HighDecember 22, 2021
• asterisk certified asterisk, sangoma asterisk, debian linux +1 more +3 more An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x... CVE-2020-28242 Fix available 6.5 MediumNovember 6, 2020
• asterisk certified asterisk, sangoma asterisk +1 more A memory exhaustion vulnerability exists in Asterisk Open Source 13.x before 13.15.1 and 14.x... CVE-2017-9358 Fix available 7.5 HighJune 2, 2017
• asterisk certified asterisk, digiumphones, open source +2 more main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2... CVE-2013-2686 Fix available 5.0 MediumMarch 29, 2013
• asterisk business edition, certified asterisk, digiumphones +1 more +3 more The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11... CVE-2013-2264 Fix available 5.0 MediumMarch 29, 2013
• asterisk business edition, certified asterisk, digiumphones +2 more +4 more Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15... CVE-2012-2186 Fix available 9.0 HighAugust 31, 2012
• asterisk certified asterisk, open source, sangoma asterisk +2 more chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1... CVE-2012-2948 Fix available 4.0 MediumJune 2, 2012