Digium vulnerabilities

Products

• Asterisk 114
• Certified Asterisk 51
• Asterisknow 3
• S800i 3
• Asterisk Digiumphones 2
• Asteriske 2
• Open Source 2
• S800i Firmware 2

Newest

• asterisk, sangoma certified asterisk +1 more Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation CVE-2023-49786 Fix available 7.5 HighDecember 14, 2023
• asterisk, sangoma certified asterisk +1 more Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update' CVE-2023-37457 Fix available 7.5 HighDecember 14, 2023
• asterisk, sangoma certified asterisk +1 more Asterisk Path Traversal vulnerability CVE-2023-49294 Fix available EPSS 45.3% 4.9 MediumDecember 14, 2023
• asterisk certified asterisk, digium asterisk, debian linux +2 more res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2... CVE-2021-46837 Fix available 6.5 MediumAugust 30, 2022
• digium asterisk, certified asterisk, debian linux +2 more An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The... CVE-2022-26651 Fix available 9.8 CriticalApril 15, 2022
• digium asterisk, debian linux +1 more An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to... CVE-2022-26499 Fix available 9.1 CriticalApril 15, 2022
• digium asterisk, debian linux +1 more An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to... CVE-2022-26498 Fix available EPSS 16.5% 7.5 HighApril 15, 2022
• digium asterisk, certified asterisk, debian linux +2 more An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before... CVE-2021-32558 Fix available 7.5 HighJuly 27, 2021
• digium asterisk An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1. To exploit, a re... CVE-2021-31878 6.5 MediumJuly 27, 2021
• digium asterisk, certified asterisk +1 more A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x... CVE-2021-26713 Fix available 6.5 MediumFebruary 19, 2021
• digium asterisk, certified asterisk +1 more Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0... CVE-2021-26712 Fix available 7.5 HighFebruary 18, 2021
• digium asterisk A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1,... CVE-2020-35776 Fix available 6.5 MediumFebruary 18, 2021
• digium asterisk, certified asterisk +1 more An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x,... CVE-2021-26906 Fix available 5.9 MediumFebruary 18, 2021
• digium asterisk, certified asterisk +1 more An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x... CVE-2021-26717 Fix available 7.5 HighFebruary 18, 2021
• digium asterisk An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through... CVE-2020-35652 Fix available 6.5 MediumJanuary 29, 2021
• digium certified asterisk, sangoma asterisk +1 more A res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before... CVE-2020-28327 Fix available 5.3 MediumNovember 6, 2020
• digium asterisk, certified asterisk, debian linux +2 more An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified... CVE-2019-18610 Fix available EPSS 50.1% 8.8 HighNovember 22, 2019
• digium asterisk, certified asterisk, debian linux +2 more An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified... CVE-2019-18976 Fix available EPSS 12.8% 7.5 HighNovember 22, 2019
• digium asterisk, certified asterisk, debian linux +2 more An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x, 16.x, and 17.x, and... CVE-2019-18790 Fix available 6.5 MediumNovember 22, 2019
• digium asterisk res_pjsip_t38 in Sangoma Asterisk 13.21-cert4, 15.7.3, and 16.5.0 allows an attacker to trigger a... CVE-2019-15297 Fix available 6.5 MediumSeptember 9, 2019
• digium asterisk main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a... CVE-2019-15639 Fix available EPSS 21.9% 7.5 HighSeptember 9, 2019
• digium asterisk, certified asterisk, debian linux +2 more An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2,... CVE-2019-13161 Fix available 5.3 MediumJuly 12, 2019
• digium asterisk, certified asterisk +1 more Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2,... CVE-2019-12827 Fix available 6.5 MediumJuly 12, 2019
• digium asterisk asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a... CVE-2016-7550 Fix available 7.5 HighMay 23, 2019
• digium asterisk An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium... CVE-2019-7251 Fix available 6.5 MediumMarch 28, 2019
• digium asterisk Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x... CVE-2018-19278 Fix available 7.5 HighNovember 14, 2018
• digium asterisk, certified asterisk, debian linux +2 more There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk... CVE-2018-17281 Fix available EPSS 52.4% 7.5 HighSeptember 24, 2018
• digium asterisk, certified asterisk, debian linux +2 more An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x... CVE-2018-12227 Fix available 5.3 MediumJune 12, 2018
• digium asterisk An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1. If the HTTP... CVE-2018-7287 EPSS 11.5% 5.9 MediumFebruary 22, 2018
• digium asterisk, certified asterisk, debian linux +2 more An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1... CVE-2018-7286 Public exploitFix available EPSS 52.7% 6.5 MediumFebruary 22, 2018
• digium asterisk A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1. The RTP support in... CVE-2018-7285 7.5 HighFebruary 22, 2018
• digium asterisk, certified asterisk, debian linux +2 more A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x... CVE-2018-7284 Public exploitFix available EPSS 66.2% 7.5 HighFebruary 22, 2018
• digium asterisk, certified asterisk +1 more An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13... CVE-2017-17850 Fix available EPSS 75.4% 7.5 HighDecember 23, 2017
• digium asterisk, certified asterisk +1 more A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7... CVE-2017-17664 Fix available EPSS 32.4% 5.9 MediumDecember 13, 2017
• digium asterisk, certified asterisk +1 more An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and... CVE-2017-17090 Public exploitFix available EPSS 82.2% 7.5 HighDecember 2, 2017
• digium asterisk, certified asterisk +1 more An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15... CVE-2017-16672 Fix available 5.9 MediumNovember 9, 2017
• digium asterisk, certified asterisk +1 more A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7... CVE-2017-16671 Fix available 8.8 HighNovember 9, 2017
• digium asterisk, certified asterisk +1 more In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified... CVE-2017-14603 Fix available 7.5 HighOctober 3, 2017
• digium asterisk gui An Improper Neutralization of Special Elements used in an OS Command issue was discovered in... CVE-2017-14001 8.8 HighSeptember 26, 2017
• digium asterisk, certified asterisk +1 more In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified... CVE-2017-14100 Fix available EPSS 13.4% 9.8 CriticalSeptember 2, 2017
• digium asterisk, certified asterisk +1 more In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before... CVE-2017-14099 Fix available 7.5 HighSeptember 2, 2017
• digium asterisk In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a... CVE-2017-14098 Fix available EPSS 50.1% 7.5 HighSeptember 2, 2017
• digium addons module Multiple cross-site scripting (XSS) vulnerabilities in views/add-license-form.php in the Digium... CVE-2015-2690 6.1 MediumAugust 2, 2017
• digium certified asterisk, open source +1 more PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified... CVE-2017-9372 Fix available 7.5 HighJune 2, 2017
• digium certified asterisk, open source +1 more The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x... CVE-2017-9359 Fix available 7.5 HighJune 2, 2017
• digium asterisk, certified asterisk +1 more Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3... CVE-2017-7617 Fix available 8.8 HighApril 10, 2017
• digium asterisk, certified asterisk +1 more An issue was discovered in Asterisk Open Source 11.x before 11.25.1, 13.x before 13.13.1, and 14... CVE-2016-9938 Fix available 5.3 MediumDecember 12, 2016
• digium asterisk An issue was discovered in Asterisk Open Source 13.12.x and 13.13.x before 13.13.1 and 14.x... CVE-2016-9937 7.5 HighDecember 12, 2016
• digium asterisk, certified asterisk, debian linux +2 more chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11... CVE-2016-7551 Fix available 7.5 HighOctober 25, 2016
• digium asterisk, certified asterisk, fedoraproject fedora +2 more chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and... CVE-2016-2316 Fix available 5.9 MediumFebruary 22, 2016
• Show olderLoading…