Read the docs

asterisk

Records88All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9

Exploited now

asterisk records in CISA KEV

No asterisk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Open Source 22 records MEDIUM Asterisk 20 records HIGH Asterisk Appliance Developer Kit 13 records MEDIUM Asterisknow 13 records MEDIUM Asterisk Business Edition 11 records MEDIUM Certified Asterisk 11 records HIGH S800i 7 records MEDIUM S800i Appliance 5 records MEDIUM

Records

11 records in Certified Asterisk · all components

TI-2022-06096 CVE-2022-21723

Out-of-bounds read in multipart parsing in PJSIP

Priority MEDIUM 52

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04357 Published 2022-01-27 No fix listed CWE-125
TI-2022-07661 CVE-2022-23608

Use after free in PJSIP

Priority MEDIUM 50

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04022 Published 2022-02-22 No fix listed CWE-416
TI-2021-15581 CVE-2021-37706

Potential integer underflow upon receiving STUN message in PJSIP

Priority MEDIUM 50

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04924 Published 2021-12-22 No fix listed CWE-191
TI-2012-01955 CVE-2012-2186 · GHSA-27ch-ccxg-45pf

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before…

Priority MEDIUM 45

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 1…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03558 Published 2012-08-31 No fix listed
TI-2021-21526 CVE-2021-46837 · GHSA-544v-7w28-m77x

res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x…

Priority LOW 36

res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0467 Published 2022-08-30 No fix listed CWE-476
TI-2013-02348 CVE-2013-2686 · GHSA-32mc-px3q-67r4

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before…

Priority LOW 27

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02126 Published 2013-03-29 No fix listed CWE-119
TI-2013-02024 CVE-2013-2264 · GHSA-79cp-774x-5w3c

The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before…

Priority LOW 25

The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and A…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01252 Published 2013-03-29 No fix listed CWE-200
TI-2012-02559 CVE-2012-2948 · GHSA-chr5-w9ff-5gcw

chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert…

Priority LOW 23

chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02119 Published 2012-06-02 No fix listed CWE-399
Open these records in search →