Skip to contentSangoma Certified Asterisk vulnerabilities
- asterisk, sangoma certified asterisk +1 moreast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalationCVE-2026-23741Fix available0.0 None
- asterisk, sangoma certified asterisk +1 moreAsterisk vulnerable to potential privilege escalationCVE-2026-23740Fix available0.0 None
- asterisk, sangoma certified asterisk +1 moreAsterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE InjectionCVE-2026-23739Fix available2.0 Low
- asterisk, sangoma certified asterisk +1 moreThe Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitizationCVE-2026-23738Fix available3.5 Low
- asterisk, sangoma certified asterisk +1 moreAsterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege EscalationCVE-2025-1131Fix available7.0 High
- asterisk, sangoma certified asterisk +1 moreAsterisk remotely exploitable leak of RTP UDP ports and internal resourcesCVE-2025-54995Fix available6.5 Medium
- asterisk, sangoma certified asterisk +1 moreAsterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory AllocationCVE-2025-49832Fix available6.5 Medium
- asterisk, sangoma certified asterisk +1 morecli_permissions.conf: deny option does not work for disallowing shell commandsCVE-2025-47780Fix available4.8 Medium
- asterisk, sangoma certified asterisk +1 moreUsing malformed From header can forge identity with ";" or NULL in name portionCVE-2025-47779Fix available7.7 High
- asterisk, sangoma certified asterisk +1 moreA malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is usedCVE-2024-42491Fix available5.7 Medium
- asterisk, sangoma certified asterisk +1 moreAsterisk susceptible to Denial of Service via DTLS Hello packets during call initiationCVE-2023-49786Fix available7.5 High
- asterisk, sangoma certified asterisk +1 moreAsterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'CVE-2023-37457Fix available7.5 High
- asterisk, sangoma certified asterisk +1 moreAsterisk Path Traversal vulnerabilityCVE-2023-49294Fix availableEPSS 45.3%4.9 Medium
- sangoma asterisk, certified asterisk +1 moreAn issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19...CVE-2022-42706Fix available4.9 Medium
- sangoma asterisk, certified asterisk +1 moreA use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9...CVE-2022-42705Fix available6.5 Medium