Skip to content
Digium Certified Asterisk vulnerabilities
-
digium asterisk, certified asterisk, debian linux +2 more
An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The...
CVE-2022-26651
Fix available
9.8 Critical
-
digium asterisk, certified asterisk, debian linux +2 more
An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before...
CVE-2021-32558
Fix available
7.5 High
-
digium asterisk, certified asterisk +1 more
A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x...
CVE-2021-26713
Fix available
6.5 Medium
-
digium asterisk, certified asterisk +1 more
Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0...
CVE-2021-26712
Fix available
7.5 High
-
digium asterisk, certified asterisk +1 more
An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x,...
CVE-2021-26906
Fix available
5.9 Medium
-
digium asterisk, certified asterisk +1 more
An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x...
CVE-2021-26717
Fix available
7.5 High
-
digium certified asterisk, sangoma asterisk +1 more
A res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before...
CVE-2020-28327
Fix available
5.3 Medium
-
digium asterisk, certified asterisk, debian linux +2 more
An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified...
CVE-2019-18610
Fix available
EPSS 50.1%
8.8 High
-
digium asterisk, certified asterisk, debian linux +2 more
An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified...
CVE-2019-18976
Fix available
EPSS 12.8%
7.5 High
-
digium asterisk, certified asterisk, debian linux +2 more
An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x, 16.x, and 17.x, and...
CVE-2019-18790
Fix available
6.5 Medium
-
digium asterisk, certified asterisk, debian linux +2 more
An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2,...
CVE-2019-13161
Fix available
5.3 Medium
-
digium asterisk, certified asterisk +1 more
Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2,...
CVE-2019-12827
Fix available
6.5 Medium
-
digium asterisk, certified asterisk, debian linux +2 more
There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk...
CVE-2018-17281
Fix available
EPSS 52.4%
7.5 High
-
digium asterisk, certified asterisk, debian linux +2 more
An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x...
CVE-2018-12227
Fix available
5.3 Medium
-
digium asterisk, certified asterisk, debian linux +2 more
An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1...
CVE-2018-7286
Public exploitFix available
EPSS 52.7%
6.5 Medium
-
digium asterisk, certified asterisk, debian linux +2 more
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x...
CVE-2018-7284
Public exploitFix available
EPSS 66.2%
7.5 High
-
digium asterisk, certified asterisk +1 more
An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13...
CVE-2017-17850
Fix available
EPSS 75.4%
7.5 High
-
digium asterisk, certified asterisk +1 more
A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7...
CVE-2017-17664
Fix available
EPSS 32.4%
5.9 Medium
-
digium asterisk, certified asterisk +1 more
An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and...
CVE-2017-17090
Public exploitFix available
EPSS 82.2%
7.5 High
-
digium asterisk, certified asterisk +1 more
An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15...
CVE-2017-16672
Fix available
5.9 Medium
-
digium asterisk, certified asterisk +1 more
A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7...
CVE-2017-16671
Fix available
8.8 High
-
digium asterisk, certified asterisk +1 more
In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified...
CVE-2017-14603
Fix available
7.5 High
-
digium asterisk, certified asterisk +1 more
In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified...
CVE-2017-14100
Fix available
EPSS 13.4%
9.8 Critical
-
digium asterisk, certified asterisk +1 more
In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before...
CVE-2017-14099
Fix available
7.5 High
-
digium certified asterisk, open source +1 more
PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified...
CVE-2017-9372
Fix available
7.5 High
-
digium certified asterisk, open source +1 more
The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x...
CVE-2017-9359
Fix available
7.5 High
-
digium asterisk, certified asterisk +1 more
Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3...
CVE-2017-7617
Fix available
8.8 High
-
digium asterisk, certified asterisk +1 more
An issue was discovered in Asterisk Open Source 11.x before 11.25.1, 13.x before 13.13.1, and 14...
CVE-2016-9938
Fix available
5.3 Medium
-
digium asterisk, certified asterisk, debian linux +2 more
chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11...
CVE-2016-7551
Fix available
7.5 High
-
digium asterisk, certified asterisk, fedoraproject fedora +2 more
chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and...
CVE-2016-2316
Fix available
5.9 Medium
-
digium asterisk, certified asterisk +1 more
Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified...
CVE-2016-2232
Fix available
6.5 Medium
-
digium asterisk, certified asterisk +1 more
Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x...
CVE-2015-3008
Fix available
EPSS 46.0%
4.3 Medium
-
digium asterisk, certified asterisk +1 more
Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open...
CVE-2014-9374
Fix available
5.0 Medium
-
digium asterisk, certified asterisk +1 more
Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6...
CVE-2014-6610
Fix available
4.0 Medium
-
digium asterisk, certified asterisk +1 more
The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x...
CVE-2014-8418
Fix available
9.0 High
-
digium asterisk, certified asterisk +1 more
ConfBridge in Asterisk 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and...
CVE-2014-8417
Fix available
6.5 Medium
-
digium asterisk, certified asterisk +1 more
ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not...
CVE-2014-8414
Fix available
5.0 Medium
-
digium asterisk, certified asterisk +1 more
The (1) VoIP channel drivers, (2) DUNDi, and (3) Asterisk Manager Interface (AMI) in Asterisk...
CVE-2014-8412
Fix available
5.0 Medium
-
digium asterisk, certified asterisk +1 more
Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and...
CVE-2014-4047
Fix available
5.0 Medium
-
digium asterisk, certified asterisk +1 more
Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6...
CVE-2014-4046
Fix available
6.5 Medium
-
digium asterisk, certified asterisk, fedoraproject fedora +2 more
channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1...
CVE-2014-2287
Fix available
3.5 Low
-
digium asterisk, certified asterisk, fedoraproject fedora +2 more
main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x...
CVE-2014-2286
Fix available
EPSS 16.3%
7.5 High
-
digium asterisk, certified asterisk, asterisk digiumphones +2 more
Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x...
CVE-2013-7100
Fix available
5.0 Medium
-
digium asterisk, asterisk digiumphones, certified asterisk +2 more
The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x...
CVE-2013-5642
Fix available
EPSS 11.7%
5.0 Medium
-
digium asterisk, certified asterisk +1 more
The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1...
CVE-2013-5641
Fix available
5.0 Medium
-
digium asterisk, certified asterisk +1 more
Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2;...
CVE-2012-5977
Fix available
4.3 Medium
-
digium asterisk, certified asterisk +1 more
Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x...
CVE-2012-5976
Fix available
5.0 Medium
-
digium asterisk, certified asterisk +1 more
channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1,...
CVE-2012-4737
Fix available
6.0 Medium
-
digium asterisk, certified asterisk, asteriske +2 more
Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1...
CVE-2012-3812
Fix available
4.0 Medium
-
digium asterisk, asterisk business edition, certified asterisk +1 more +3 more
channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2,...
CVE-2012-3863
Fix available
4.0 Medium
- Show olderLoading…