Read the docs
TI-2010-00654 Aliases CVE-2010-0685GHSA-2w2c-jqh6-rwvr

The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x…

Priority LOW 26Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable and wildcard pattern matches, allows context-dependent attackers to inject strings into the dialplan using metacharacters that are injected when the variable is expanded, as demonstrated using the Dial application to process a crafted SIP INVITE message that adds an unintended outgoing channel leg. NOTE: it could be argued that this is not a vulnerability in Asterisk, but a class of vulnerabilities that can occur in any program that uses this feature without the associated filtering functionality that is already available.

Why it matters now

EPSS 0.0137 72nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 126

CPEVersionsRoleVendor
cpe:2.3:a:digium:asterisk:1.2.0:*:*:*:*:*:*:*1.2.0VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.0:beta1:*:*:*:*:*:*1.2.0 beta1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.0:beta2:*:*:*:*:*:*1.2.0 beta2VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.0:rc1:*:*:*:*:*:*1.2.0 rc1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.0:rc2:*:*:*:*:*:*1.2.0 rc2VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.1:*:*:*:*:*:*:*1.2.1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.2:*:*:*:*:*:*:*1.2.2VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.2:netsec:*:*:*:*:*:*1.2.2 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.3:*:*:*:*:*:*:*1.2.3VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.3:netsec:*:*:*:*:*:*1.2.3 netsecVulnerableDigium
  • cpe:2.3:a:digium:asterisk:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.0:beta1:*:*:*:*:*:* Versions 1.2.0 beta1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.0:beta2:*:*:*:*:*:* Versions 1.2.0 beta2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.0:rc1:*:*:*:*:*:* Versions 1.2.0 rc1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.0:rc2:*:*:*:*:*:* Versions 1.2.0 rc2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.1:*:*:*:*:*:*:* Versions 1.2.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.2:*:*:*:*:*:*:* Versions 1.2.2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.2:netsec:*:*:*:*:*:* Versions 1.2.2 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.3:*:*:*:*:*:*:* Versions 1.2.3 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.3:netsec:*:*:*:*:*:* Versions 1.2.3 netsec Vulnerable ·Digium
Show 116 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:*1.2.6VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:*1.2.7VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:*1.2.8VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.9:*:*:*:*:*:*:*1.2.9VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:*1.2.10VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.10:netsec:*:*:*:*:*:*1.2.10 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.11:*:*:*:*:*:*:*1.2.11VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.11:netsec:*:*:*:*:*:*1.2.11 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.12:*:*:*:*:*:*:*1.2.12VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.12:netsec:*:*:*:*:*:*1.2.12 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.12.1:*:*:*:*:*:*:*1.2.12.1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.12.1:netsec:*:*:*:*:*:*1.2.12.1 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.13:*:*:*:*:*:*:*1.2.13VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.13:netsec:*:*:*:*:*:*1.2.13 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.14:*:*:*:*:*:*:*1.2.14VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.15:*:*:*:*:*:*:*1.2.15VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.15:netsec:*:*:*:*:*:*1.2.15 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.16:*:*:*:*:*:*:*1.2.16VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.16:netsec:*:*:*:*:*:*1.2.16 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.17:*:*:*:*:*:*:*1.2.17VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.17:netsec:*:*:*:*:*:*1.2.17 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.18:*:*:*:*:*:*:*1.2.18VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.18:netsec:*:*:*:*:*:*1.2.18 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.19:*:*:*:*:*:*:*1.2.19VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.19:netsec:*:*:*:*:*:*1.2.19 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.20:*:*:*:*:*:*:*1.2.20VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.20:netsec:*:*:*:*:*:*1.2.20 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.21:*:*:*:*:*:*:*1.2.21VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.21:netsec:*:*:*:*:*:*1.2.21 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.21.1:*:*:*:*:*:*:*1.2.21.1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.21.1:netsec:*:*:*:*:*:*1.2.21.1 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.22:*:*:*:*:*:*:*1.2.22VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.22:netsec:*:*:*:*:*:*1.2.22 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.23:*:*:*:*:*:*:*1.2.23VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.23:netsec:*:*:*:*:*:*1.2.23 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.24:*:*:*:*:*:*:*1.2.24VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.24:netsec:*:*:*:*:*:*1.2.24 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.25:*:*:*:*:*:*:*1.2.25VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.25:netsec:*:*:*:*:*:*1.2.25 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.26:*:*:*:*:*:*:*1.2.26VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.26:netsec:*:*:*:*:*:*1.2.26 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.26.1:*:*:*:*:*:*:*1.2.26.1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.26.1:netsec:*:*:*:*:*:*1.2.26.1 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.26.2:*:*:*:*:*:*:*1.2.26.2VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.26.2:netsec:*:*:*:*:*:*1.2.26.2 netsecVulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.27:*:*:*:*:*:*:*1.2.27VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.28:*:*:*:*:*:*:*1.2.28VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.28.1:*:*:*:*:*:*:*1.2.28.1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.29:*:*:*:*:*:*:*1.2.29VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.30:*:*:*:*:*:*:*1.2.30VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.30.1:*:*:*:*:*:*:*1.2.30.1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.30.2:*:*:*:*:*:*:*1.2.30.2VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.30.3:*:*:*:*:*:*:*1.2.30.3VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.30.4:*:*:*:*:*:*:*1.2.30.4VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.31:*:*:*:*:*:*:*1.2.31VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.31.1:*:*:*:*:*:*:*1.2.31.1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.32:*:*:*:*:*:*:*1.2.32VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.33:*:*:*:*:*:*:*1.2.33VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.34:*:*:*:*:*:*:*1.2.34VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.35:*:*:*:*:*:*:*1.2.35VulnerableDigium
cpe:2.3:a:digium:asterisk:1.2.36:*:*:*:*:*:*:*1.2.36VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:*1.4.0VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.3:*:*:*:*:*:*:*1.4.3VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.4:*:*:*:*:*:*:*1.4.4VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.5:*:*:*:*:*:*:*1.4.5VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.6:*:*:*:*:*:*:*1.4.6VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.7:*:*:*:*:*:*:*1.4.7VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.8:*:*:*:*:*:*:*1.4.8VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.9:*:*:*:*:*:*:*1.4.9VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.10:*:*:*:*:*:*:*1.4.10VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.11:*:*:*:*:*:*:*1.4.11VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.12:*:*:*:*:*:*:*1.4.12VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.13:*:*:*:*:*:*:*1.4.13VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.14:*:*:*:*:*:*:*1.4.14VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.15:*:*:*:*:*:*:*1.4.15VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.16:*:*:*:*:*:*:*1.4.16VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.17:*:*:*:*:*:*:*1.4.17VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.18:*:*:*:*:*:*:*1.4.18VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.19:*:*:*:*:*:*:*1.4.19VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.20:*:*:*:*:*:*:*1.4.20VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.21:*:*:*:*:*:*:*1.4.21VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.22:*:*:*:*:*:*:*1.4.22VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.23:*:*:*:*:*:*:*1.4.23VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.24:*:*:*:*:*:*:*1.4.24VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.25:*:*:*:*:*:*:*1.4.25VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.26:*:*:*:*:*:*:*1.4.26VulnerableDigium
cpe:2.3:a:digium:asterisk:1.4.27:*:*:*:*:*:*:*1.4.27VulnerableDigium
cpe:2.3:a:digium:asterisk:1.6.0:*:*:*:*:*:*:*1.6.0VulnerableDigium
cpe:2.3:a:digium:asterisk:1.6.1:*:*:*:*:*:*:*1.6.1VulnerableDigium
cpe:2.3:a:digium:asterisk:1.6.1.0:*:*:*:*:*:*:*1.6.1.0Running onDigium
cpe:2.3:a:digium:asterisk:1.6.2.0:*:*:*:*:*:*:*1.6.2.0Running onDigium
cpe:2.3:a:digium:asterisk:b.1.3.2:-:business:*:*:*:*:*b.1.3.2VulnerableDigium
cpe:2.3:a:digium:asterisk:b.1.3.3:-:business:*:*:*:*:*b.1.3.3VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.2.0:-:business:*:*:*:*:*b.2.2.0VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.2.1:-:business:*:*:*:*:*b.2.2.1VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.3.1:-:business:*:*:*:*:*b.2.3.1VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.3.2:-:business:*:*:*:*:*b.2.3.2VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.3.3:-:business:*:*:*:*:*b.2.3.3VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.3.4:-:business:*:*:*:*:*b.2.3.4VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.3.5:-:business:*:*:*:*:*b.2.3.5VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.3.6:-:business:*:*:*:*:*b.2.3.6VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.5.0:-:business:*:*:*:*:*b.2.5.0VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.5.1:-:business:*:*:*:*:*b.2.5.1VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.5.2:-:business:*:*:*:*:*b.2.5.2VulnerableDigium
cpe:2.3:a:digium:asterisk:b.2.5.3:-:business:*:*:*:*:*b.2.5.3VulnerableDigium
cpe:2.3:a:digium:asterisk:c.1.0:beta7:business:*:*:*:*:*c.1.0 beta7VulnerableDigium
cpe:2.3:a:digium:asterisk:c.1.0:beta8:business:*:*:*:*:*c.1.0 beta8VulnerableDigium
cpe:2.3:a:digium:asterisk:c.1.6:-:business:*:*:*:*:*c.1.6VulnerableDigium
cpe:2.3:a:digium:asterisk:c.1.6.1:-:business:*:*:*:*:*c.1.6.1VulnerableDigium
cpe:2.3:a:digium:asterisk:c.1.6.2:-:business:*:*:*:*:*c.1.6.2VulnerableDigium
cpe:2.3:a:digium:asterisk:c.1.8.0:-:business:*:*:*:*:*c.1.8.0VulnerableDigium
cpe:2.3:a:digium:asterisk:c.1.8.1:-:business:*:*:*:*:*c.1.8.1VulnerableDigium
cpe:2.3:a:digium:asterisk:c.2.3:-:business:*:*:*:*:*c.2.3VulnerableDigium
cpe:2.3:a:digium:asterisk:c.3.0:-:business:*:*:*:*:*c.3.0VulnerableDigium
  • cpe:2.3:a:digium:asterisk:1.2.6:*:*:*:*:*:*:* Versions 1.2.6 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.7:*:*:*:*:*:*:* Versions 1.2.7 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.8:*:*:*:*:*:*:* Versions 1.2.8 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.9:*:*:*:*:*:*:* Versions 1.2.9 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.10:*:*:*:*:*:*:* Versions 1.2.10 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.10:netsec:*:*:*:*:*:* Versions 1.2.10 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.11:*:*:*:*:*:*:* Versions 1.2.11 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.11:netsec:*:*:*:*:*:* Versions 1.2.11 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.12:*:*:*:*:*:*:* Versions 1.2.12 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.12:netsec:*:*:*:*:*:* Versions 1.2.12 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.12.1:*:*:*:*:*:*:* Versions 1.2.12.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.12.1:netsec:*:*:*:*:*:* Versions 1.2.12.1 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.13:*:*:*:*:*:*:* Versions 1.2.13 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.13:netsec:*:*:*:*:*:* Versions 1.2.13 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.14:*:*:*:*:*:*:* Versions 1.2.14 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.15:*:*:*:*:*:*:* Versions 1.2.15 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.15:netsec:*:*:*:*:*:* Versions 1.2.15 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.16:*:*:*:*:*:*:* Versions 1.2.16 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.16:netsec:*:*:*:*:*:* Versions 1.2.16 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.17:*:*:*:*:*:*:* Versions 1.2.17 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.17:netsec:*:*:*:*:*:* Versions 1.2.17 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.18:*:*:*:*:*:*:* Versions 1.2.18 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.18:netsec:*:*:*:*:*:* Versions 1.2.18 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.19:*:*:*:*:*:*:* Versions 1.2.19 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.19:netsec:*:*:*:*:*:* Versions 1.2.19 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.20:*:*:*:*:*:*:* Versions 1.2.20 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.20:netsec:*:*:*:*:*:* Versions 1.2.20 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.21:*:*:*:*:*:*:* Versions 1.2.21 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.21:netsec:*:*:*:*:*:* Versions 1.2.21 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.21.1:*:*:*:*:*:*:* Versions 1.2.21.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.21.1:netsec:*:*:*:*:*:* Versions 1.2.21.1 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.22:*:*:*:*:*:*:* Versions 1.2.22 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.22:netsec:*:*:*:*:*:* Versions 1.2.22 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.23:*:*:*:*:*:*:* Versions 1.2.23 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.23:netsec:*:*:*:*:*:* Versions 1.2.23 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.24:*:*:*:*:*:*:* Versions 1.2.24 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.24:netsec:*:*:*:*:*:* Versions 1.2.24 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.25:*:*:*:*:*:*:* Versions 1.2.25 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.25:netsec:*:*:*:*:*:* Versions 1.2.25 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.26:*:*:*:*:*:*:* Versions 1.2.26 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.26:netsec:*:*:*:*:*:* Versions 1.2.26 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.26.1:*:*:*:*:*:*:* Versions 1.2.26.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.26.1:netsec:*:*:*:*:*:* Versions 1.2.26.1 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.26.2:*:*:*:*:*:*:* Versions 1.2.26.2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.26.2:netsec:*:*:*:*:*:* Versions 1.2.26.2 netsec Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.27:*:*:*:*:*:*:* Versions 1.2.27 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.28:*:*:*:*:*:*:* Versions 1.2.28 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.28.1:*:*:*:*:*:*:* Versions 1.2.28.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.29:*:*:*:*:*:*:* Versions 1.2.29 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.30:*:*:*:*:*:*:* Versions 1.2.30 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.30.1:*:*:*:*:*:*:* Versions 1.2.30.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.30.2:*:*:*:*:*:*:* Versions 1.2.30.2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.30.3:*:*:*:*:*:*:* Versions 1.2.30.3 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.30.4:*:*:*:*:*:*:* Versions 1.2.30.4 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.31:*:*:*:*:*:*:* Versions 1.2.31 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.31.1:*:*:*:*:*:*:* Versions 1.2.31.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.32:*:*:*:*:*:*:* Versions 1.2.32 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.33:*:*:*:*:*:*:* Versions 1.2.33 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.34:*:*:*:*:*:*:* Versions 1.2.34 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.35:*:*:*:*:*:*:* Versions 1.2.35 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.2.36:*:*:*:*:*:*:* Versions 1.2.36 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.4:*:*:*:*:*:*:* Versions 1.4.4 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.5:*:*:*:*:*:*:* Versions 1.4.5 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.6:*:*:*:*:*:*:* Versions 1.4.6 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.8:*:*:*:*:*:*:* Versions 1.4.8 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.9:*:*:*:*:*:*:* Versions 1.4.9 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.10:*:*:*:*:*:*:* Versions 1.4.10 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.11:*:*:*:*:*:*:* Versions 1.4.11 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.12:*:*:*:*:*:*:* Versions 1.4.12 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.13:*:*:*:*:*:*:* Versions 1.4.13 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.14:*:*:*:*:*:*:* Versions 1.4.14 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.15:*:*:*:*:*:*:* Versions 1.4.15 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.16:*:*:*:*:*:*:* Versions 1.4.16 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.17:*:*:*:*:*:*:* Versions 1.4.17 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.18:*:*:*:*:*:*:* Versions 1.4.18 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.19:*:*:*:*:*:*:* Versions 1.4.19 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.20:*:*:*:*:*:*:* Versions 1.4.20 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.21:*:*:*:*:*:*:* Versions 1.4.21 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.22:*:*:*:*:*:*:* Versions 1.4.22 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.23:*:*:*:*:*:*:* Versions 1.4.23 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.24:*:*:*:*:*:*:* Versions 1.4.24 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.25:*:*:*:*:*:*:* Versions 1.4.25 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.26:*:*:*:*:*:*:* Versions 1.4.26 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.4.27:*:*:*:*:*:*:* Versions 1.4.27 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:1.6.1.0:*:*:*:*:*:*:* Versions 1.6.1.0 Running on ·Digium
  • cpe:2.3:a:digium:asterisk:1.6.2.0:*:*:*:*:*:*:* Versions 1.6.2.0 Running on ·Digium
  • cpe:2.3:a:digium:asterisk:b.1.3.2:-:business:*:*:*:*:* Versions b.1.3.2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.1.3.3:-:business:*:*:*:*:* Versions b.1.3.3 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.2.0:-:business:*:*:*:*:* Versions b.2.2.0 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.2.1:-:business:*:*:*:*:* Versions b.2.2.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.3.1:-:business:*:*:*:*:* Versions b.2.3.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.3.2:-:business:*:*:*:*:* Versions b.2.3.2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.3.3:-:business:*:*:*:*:* Versions b.2.3.3 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.3.4:-:business:*:*:*:*:* Versions b.2.3.4 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.3.5:-:business:*:*:*:*:* Versions b.2.3.5 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.3.6:-:business:*:*:*:*:* Versions b.2.3.6 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.5.0:-:business:*:*:*:*:* Versions b.2.5.0 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.5.1:-:business:*:*:*:*:* Versions b.2.5.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.5.2:-:business:*:*:*:*:* Versions b.2.5.2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:b.2.5.3:-:business:*:*:*:*:* Versions b.2.5.3 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:c.1.0:beta7:business:*:*:*:*:* Versions c.1.0 beta7 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:c.1.0:beta8:business:*:*:*:*:* Versions c.1.0 beta8 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:c.1.6:-:business:*:*:*:*:* Versions c.1.6 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:c.1.6.1:-:business:*:*:*:*:* Versions c.1.6.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:c.1.6.2:-:business:*:*:*:*:* Versions c.1.6.2 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:c.1.8.0:-:business:*:*:*:*:* Versions c.1.8.0 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:c.1.8.1:-:business:*:*:*:*:* Versions c.1.8.1 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:c.2.3:-:business:*:*:*:*:* Versions c.2.3 Vulnerable ·Digium
  • cpe:2.3:a:digium:asterisk:c.3.0:-:business:*:*:*:*:* Versions c.3.0 Vulnerable ·Digium

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2010-0685
  2. 2026-10-03 Alias added: GHSA-2w2c-jqh6-rwvr

References

Exploit 1

Advisory 2

Other 1

  • TI-2006-05256 Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c)… CVSS 2.0HIGH 7.5
  • TI-2017-12542 An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older… CVSS 3.0HIGH 7.5
  • TI-2023-27195 Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation CVSS 3.1HIGH 7.5
  • TI-2017-13083 An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and… CVSS 3.0HIGH 7.5
  • TI-2019-13459 An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and… CVSS 3.1HIGH 8.8
  • TI-2018-05283 A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5… CVSS 3.0HIGH 7.5
See all 113 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences