Skip to contentAsterisk vulnerabilities
Newest
- asterisk open sourcemain/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x...CVE-2012-2414Fix available6.5 Medium
- asterisk open sourcechan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp...CVE-2012-0885Fix available4.3 Medium
- asterisk open sourcechan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before...CVE-2011-4063Fix available6.8 Medium
- asteriskAsterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2...CVE-2010-0441Fix available5.0 Medium
- asterisk, asterisk open source, appliance s800i +1 more +3 moreThe IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26...CVE-2009-2346Fix available7.8 High
- asterisk business edition, open source, s800i appliance +2 moreIAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0...CVE-2009-0041Fix available5.0 Medium
- asterisk zaptelArray index error in the dahdi/tor2.c driver in Zaptel (aka DAHDI) 1.4.11 and earlier allows...CVE-2008-57447.2 High
- asterisk business edition, open source +1 moreAsterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when...CVE-2008-5558Fix available4.3 Medium
- asterisk zaptelArray index error in the (1) torisa.c and (2) dahdi/tor2.c drivers in Zaptel (aka DAHDI) 1.4.11...CVE-2008-53967.2 High
- trixbox pbx, asterisk p b x +1 moreAsterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and 1.6.0.x before 1.6.0.8;...CVE-2008-3903Fix available3.5 Low
- asterisk appliance developer kit, business edition, asterisknow +1 more +3 moreThe FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30,...CVE-2008-3264Fix available7.8 High
- asteriskThe IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x...CVE-2008-3263Public exploitFix availableEPSS 28.0%7.8 High
- asterisk asterisk-addonsThe ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before...CVE-2008-25435.0 Medium
- asterisk business edition, open source +1 moreAsterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B...CVE-2008-2119Public exploitFix available4.3 Medium
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreThe IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision...CVE-2008-1923Fix available7.1 High
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreThe IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x...CVE-2008-1897Fix available4.3 Medium
- asterisk, asterisk appliance developer kit, business edition +2 more +4 moreThe AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6...CVE-2008-1390Fix available9.3 High
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreMultiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open...CVE-2008-1289Public exploitFix availableEPSS 11.5%7.5 High
- asterisk open sourceFormat string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote...CVE-2008-1333Fix available5.8 Medium
- asterisk, asterisk appliance developer kit, business edition +3 more +5 moreUnspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and...CVE-2008-1332Fix available8.8 High
- asterisk appliance developer kit, business edition, asterisknow +2 more +4 moreThe SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0...CVE-2008-0095Public exploitFix availableEPSS 25.4%5.0 Medium
- asterisk business edition, open source +1 moreAsterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x...CVE-2007-6430Fix available4.3 Medium
- asterisk zaptel** DISPUTED ** Buffer overflow in sethdlc.c in the Asterisk Zaptel 1.4.5.1 might allow local...CVE-2007-5690Disputed4.6 Medium
- asterisk asterisk-addonsMultiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1...CVE-2007-5488Public exploit7.5 High
- asteriskAsterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage...CVE-2007-45215.0 Medium
- asterisk, asterisk appliance developer kit, asterisknow +2 moreThe SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before...CVE-2007-4455Fix available5.0 Medium
- asterisk, asterisk appliance developer kit, asterisknow +1 more +3 moreThe Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before...CVE-2007-4280Fix available3.5 Low
- asterisk, asterisk appliance developer kit, asterisknow +1 more +3 moreThe STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance...CVE-2007-3765Fix available5.0 Medium
- asterisk, asterisk appliance developer kit, asterisknow +1 more +3 moreThe Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8,...CVE-2007-3764Public exploitFix availableEPSS 31.5%5.0 Medium
- asterisk, asterisk appliance developer kit, asterisknow +1 more +3 moreThe IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business...CVE-2007-3763Public exploitFix availableEPSS 26.6%5.0 Medium
- asterisk, asterisk appliance developer kit, asterisknow +1 more +3 moreStack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and...CVE-2007-3762Fix available9.3 High
- asteriskThe IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate...CVE-2007-2488Fix available10.0 High
- asteriskThe SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not...CVE-2007-2297Fix available7.8 High
- asteriskThe Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to...CVE-2007-2294Fix available7.8 High
- asteriskMultiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP...CVE-2007-2293Public exploitFix availableEPSS 23.9%7.6 High
- asteriskThe Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate...CVE-2007-1595Fix available7.5 High
- asteriskThe handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2...CVE-2007-15947.8 High
- asteriskThe channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to...CVE-2007-1561Public exploitFix availableEPSS 14.9%7.8 High