Skip to contentDigium Asterisk vulnerabilities
- digium asterisk, s800i firmware +1 moreThe SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, 1.4.x before 1.4.26.1, 1.6.0...CVE-2009-2726Fix available7.8 High
- digium asteriskmain/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial...CVE-2009-2651Fix available5.0 Medium
- digium asteriskThe SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6...CVE-2009-08713.5 Low
- digium asteriskSQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x...CVE-2007-6171Fix available7.5 High
- digium asterisk, debian linux +1 moreSQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in...CVE-2007-6170Fix available6.5 Medium
- digium asteriskMultiple buffer overflows in the voicemail functionality in Asterisk 1.4.x before 1.4.13, when...CVE-2007-5358Fix available6.8 Medium
- digium asterisk, asterisk appliance developer kit +1 moreThe IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and...CVE-2007-4103Fix available7.5 High
- digium asteriskAsterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of...CVE-2007-1306Public exploitFix availableEPSS 20.9%7.8 High
- digium asteriskUnspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x...CVE-2006-5445Fix available7.8 High
- digium asteriskInteger overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in...CVE-2006-5444Public exploitFix availableEPSS 86.5%7.5 High
- digium asteriskAsterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the...CVE-2006-4346Fix available7.5 High
- digium asteriskStack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows...CVE-2006-4345Fix available7.5 High
- digium asteriskThe IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11...CVE-2006-2898Fix available7.5 High
- digium asteriskInteger signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers...CVE-2006-1827Fix available6.4 Medium
- digium asteriskDirectory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows...CVE-2005-3559Public exploitFix availableEPSS 20.2%5.0 Medium
- digium asteriskStack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the ...CVE-2005-2081Fix available5.0 Medium
- digium asteriskSQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk...CVE-2003-0779Fix available7.5 High
- digium asteriskBuffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP)...CVE-2003-0761Fix available7.5 High