Read the docs

Digium

Records119All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high41CVSS 7.0–8.9

Exploited now

Digium records in CISA KEV

No Digium vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Asterisk 114 records HIGH Certified Asterisk 51 records HIGH Asterisknow 3 records LOW S800i 3 records LOW Asterisk Digiumphones 2 records LOW Asteriske 2 records LOW Open Source 2 records MEDIUM S800i Firmware 2 records MEDIUM

Records

3 records in Asterisknow · all components

TI-2011-01000 CVE-2011-1147 · GHSA-747x-cf7f-hf5f

Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2)…

Priority LOW 36

Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03525 Published 2011-03-15 No fix listed CWE-119
TI-2011-00422 CVE-2011-0495 · GHSA-27ph-x57w-v4gm

Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk…

Priority LOW 34

Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when r…

CVSS 2.0MEDIUM 6.0 Network Low privileges Interaction — EPSS 0.04206 Published 2011-01-20 No fix listed CWE-787
TI-2009-03551 CVE-2009-3727 · GHSA-827c-j6w2-8fg4

Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17…

Priority LOW 30

Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; Ast…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04201 Published 2009-11-10 No fix listed CWE-200
Open these records in search →