Skip to content

Asterisk Open Source vulnerabilities

asterisk certified asterisk, digiumphones, open source +2 more main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2... CVE-2013-2686 Fix available 5.0 MediumMarch 29, 2013
asterisk open source Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11... CVE-2013-2685 7.5 HighMarch 29, 2013
asterisk business edition, certified asterisk, digiumphones +1 more +3 more The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11... CVE-2013-2264 Fix available 5.0 MediumMarch 29, 2013
asterisk business edition, certified asterisk, digiumphones +2 more +4 more Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15... CVE-2012-2186 Fix available 9.0 HighAugust 31, 2012
asterisk certified asterisk, open source, sangoma asterisk +2 more chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1... CVE-2012-2948 Fix available 4.0 MediumJune 2, 2012
asterisk open source chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x... CVE-2012-2416 Fix available 6.5 MediumApril 30, 2012
asterisk open source Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source... CVE-2012-2415 Fix available 6.5 MediumApril 25, 2012
asterisk open source main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x... CVE-2012-2414 Fix available 6.5 MediumApril 25, 2012
asterisk open source chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp... CVE-2012-0885 Fix available 4.3 MediumJanuary 25, 2012
asterisk open source chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before... CVE-2011-4063 Fix available 6.8 MediumOctober 21, 2011
asterisk, asterisk open source, appliance s800i +1 more +3 more The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26... CVE-2009-2346 Fix available 7.8 HighSeptember 8, 2009
asterisk business edition, open source, s800i appliance +2 more IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0... CVE-2009-0041 Fix available 5.0 MediumJanuary 14, 2009
asterisk business edition, open source +1 more Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when... CVE-2008-5558 Fix available 4.3 MediumDecember 17, 2008
asterisk appliance developer kit, business edition, asterisknow +1 more +3 more The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30,... CVE-2008-3264 Fix available 7.8 HighJuly 24, 2008
asterisk business edition, open source +1 more Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B... CVE-2008-2119 Public exploitFix available 4.3 MediumJune 4, 2008
asterisk appliance developer kit, business edition, asterisknow +2 more +4 more The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision... CVE-2008-1923 Fix available 7.1 HighApril 23, 2008
asterisk appliance developer kit, business edition, asterisknow +2 more +4 more The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x... CVE-2008-1897 Fix available 4.3 MediumApril 23, 2008
asterisk appliance developer kit, business edition, asterisknow +2 more +4 more Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open... CVE-2008-1289 Public exploitFix available EPSS 11.5% 7.5 HighMarch 24, 2008
asterisk open source Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote... CVE-2008-1333 Fix available 5.8 MediumMarch 20, 2008
asterisk, asterisk appliance developer kit, business edition +3 more +5 more Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and... CVE-2008-1332 Fix available 8.8 HighMarch 20, 2008
asterisk appliance developer kit, business edition, asterisknow +2 more +4 more The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0... CVE-2008-0095 Public exploitFix available EPSS 25.4% 5.0 MediumJanuary 8, 2008
asterisk business edition, open source +1 more Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x... CVE-2007-6430 Fix available 4.3 MediumDecember 20, 2007