In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized data disclosure (media takeover in the RTP stack) is possible with careful timing by an attacker. The "strictrtp" option in rtp.conf enables a feature of the RTP stack that learns the source address of media for a session and drops any packets that do not originate from the expected address. This option is enabled by default in Asterisk 11 and above. The "nat" and "rtp_symmetric" options (for chan_sip and chan_pjsip, respectively) enable symmetric RTP support in the RTP stack. This uses the source address of incoming media as the target address of any sent media. This option is not enabled by default, but is commonly enabled to handle devices behind NAT. A change was made to the strict RTP support in the RTP stack to better tolerate late media when a reinvite occurs. When combined with the symmetric RTP support, this introduced an avenue where media could be hijacked. Instead of only learning a new address when expected, the new code allowed a new source address to be learned at all times. If a flood of RTP traffic was received, the strict RTP support would allow the new address to provide media, and (with symmetric RTP enabled) outgoing traffic would be sent to this new address, allowing the media to be hijacked. Provided the attacker continued to send traffic, they would continue to receive traffic as well.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 189
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:* | 13.0.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.0.0:beta1:*:*:*:*:*:* | 13.0.0 beta1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.0.0:beta2:*:*:*:*:*:* | 13.0.0 beta2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.0.0:beta3:*:*:*:*:*:* | 13.0.0 beta3 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:* | 13.0.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.0.2:*:*:*:*:*:*:* | 13.0.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:* | 13.1.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:* | 13.1.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:* | 13.1.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.1.1:*:*:*:*:*:*:* | 13.1.1 | Vulnerable | Digium |
- cpe:2.3:a:digium:asterisk:13.0.0:*:*:*:lts:*:*:* Versions 13.0.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.0.0:beta1:*:*:*:*:*:* Versions 13.0.0 beta1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.0.0:beta2:*:*:*:*:*:* Versions 13.0.0 beta2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.0.0:beta3:*:*:*:*:*:* Versions 13.0.0 beta3 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.0.1:*:*:*:*:*:*:* Versions 13.0.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.0.2:*:*:*:*:*:*:* Versions 13.0.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.1.0:*:*:*:*:*:*:* Versions 13.1.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.1.0:rc1:*:*:*:*:*:* Versions 13.1.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.1.0:rc2:*:*:*:*:*:* Versions 13.1.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.1.1:*:*:*:*:*:*:* Versions 13.1.1 Vulnerable ·Digium
Show 179 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:* | 13.2.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:* | 13.2.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.2.1:*:*:*:*:*:*:* | 13.2.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:* | 13.3.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.3.2:*:*:*:*:*:*:* | 13.3.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:* | 13.4.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:* | 13.4.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:* | 13.5.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:* | 13.5.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:* | 13.6.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:* | 13.7.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:* | 13.7.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.7.1:*:*:*:*:*:*:* | 13.7.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.7.2:*:*:*:*:*:*:* | 13.7.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:*:*:*:* | 13.8.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.8.0:rc1:*:*:*:*:*:* | 13.8.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:*:*:*:* | 13.8.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:*:*:*:* | 13.8.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:*:*:*:* | 13.9.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.9.1:*:*:*:*:*:*:* | 13.9.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:*:*:*:* | 13.10.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.10.0:rc1:*:*:*:*:*:* | 13.10.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:*:*:*:* | 13.11.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.11.1:*:*:*:*:*:*:* | 13.11.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.11.2:*:*:*:*:*:*:* | 13.11.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.12:*:*:*:*:*:*:* | 13.12 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:*:*:*:* | 13.12.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:*:*:*:* | 13.12.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:*:*:*:* | 13.12.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.13:*:*:*:*:*:*:* | 13.13 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:*:*:*:* | 13.13.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.13.1:*:*:*:*:*:*:* | 13.13.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:*:*:*:* | 13.14.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.14.0:rc1:*:*:*:*:*:* | 13.14.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.14.0:rc2:*:*:*:*:*:* | 13.14.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.14.1:*:*:*:*:*:*:* | 13.14.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:*:*:*:* | 13.15.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.15.0:rc1:*:*:*:*:*:* | 13.15.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.15.0:rc2:*:*:*:*:*:* | 13.15.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.15.0:rc3:*:*:*:*:*:* | 13.15.0 rc3 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.15.1:*:*:*:*:*:*:* | 13.15.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:*:*:*:* | 13.16.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.16.0:rc1:*:*:*:*:*:* | 13.16.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.16.0:rc2:*:*:*:*:*:* | 13.16.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:*:*:*:* | 13.17.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:13.17.0:rc1:*:*:*:*:*:* | 13.17.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.0:*:*:*:*:*:*:* | 14.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.0.0:*:*:*:*:*:*:* | 14.0.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.0.0:beta1:*:*:*:*:*:* | 14.0.0 beta1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.0.0:beta2:*:*:*:*:*:* | 14.0.0 beta2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.0.0:rc1:*:*:*:*:*:* | 14.0.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.0.0:rc2:*:*:*:*:*:* | 14.0.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.0.1:*:*:*:*:*:*:* | 14.0.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.0.2:*:*:*:*:*:*:* | 14.0.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.1:*:*:*:*:*:*:* | 14.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.01:*:*:*:*:*:*:* | 14.01 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.1.0:*:*:*:*:*:*:* | 14.1.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.1.1:*:*:*:*:*:*:* | 14.1.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.1.2:*:*:*:*:*:*:* | 14.1.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.02:*:*:*:*:*:*:* | 14.02 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.2:*:*:*:*:*:*:* | 14.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.2.0:*:*:*:*:*:*:* | 14.2.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.2.1:*:*:*:*:*:*:* | 14.2.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.3.0:*:*:*:*:*:*:* | 14.3.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.3.0:rc1:*:*:*:*:*:* | 14.3.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.3.0:rc2:*:*:*:*:*:* | 14.3.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.3.1:*:*:*:*:*:*:* | 14.3.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.4.0:*:*:*:*:*:*:* | 14.4.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.4.0:rc1:*:*:*:*:*:* | 14.4.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.4.0:rc2:*:*:*:*:*:* | 14.4.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.4.0:rc3:*:*:*:*:*:* | 14.4.0 rc3 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.4.1:*:*:*:*:*:*:* | 14.4.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.5.0:*:*:*:*:*:*:* | 14.5.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.5.0:rc1:*:*:*:*:*:* | 14.5.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.5.0:rc2:*:*:*:*:*:* | 14.5.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.6.0:*:*:*:*:*:*:* | 14.6.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:14.6.0:rc1:*:*:*:*:*:* | 14.6.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.0.0:*:*:*:*:*:*:* | 11.0.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.0.0:beta1:*:*:*:*:*:* | 11.0.0 beta1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.0.0:beta2:*:*:*:*:*:* | 11.0.0 beta2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.0.0:rc1:*:*:*:*:*:* | 11.0.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.0.0:rc2:*:*:*:*:*:* | 11.0.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.0.1:*:*:*:*:*:*:* | 11.0.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.0.2:*:*:*:*:*:*:* | 11.0.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.1.0:*:*:*:*:*:*:* | 11.1.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.1.0:rc1:*:*:*:*:*:* | 11.1.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.1.0:rc2:*:*:*:*:*:* | 11.1.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.1.0:rc3:*:*:*:*:*:* | 11.1.0 rc3 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.1.1:*:*:*:*:*:*:* | 11.1.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.1.2:*:*:*:*:*:*:* | 11.1.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.2.0:rc1:*:*:*:*:*:* | 11.2.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.2.1:*:*:*:*:*:*:* | 11.2.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.2.2:*:*:*:*:*:*:* | 11.2.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.4.0:rc4:*:*:*:*:*:* | 11.4.0 rc4 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.6.0:*:*:*:*:*:*:* | 11.6.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.6.0:rc1:*:*:*:*:*:* | 11.6.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.6.0:rc2:*:*:*:*:*:* | 11.6.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.6.1:*:*:*:*:*:*:* | 11.6.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.7.0:*:*:*:*:*:*:* | 11.7.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.7.0:rc1:*:*:*:*:*:* | 11.7.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.7.0:rc2:*:*:*:*:*:* | 11.7.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.8.0:-:*:*:*:*:*:* | 11.8.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.8.0:rc1:*:*:*:*:*:* | 11.8.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.8.0:rc2:*:*:*:*:*:* | 11.8.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.8.0:rc3:*:*:*:*:*:* | 11.8.0 rc3 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.8.1:*:*:*:*:*:*:* | 11.8.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.9.0:*:*:*:*:*:*:* | 11.9.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.9.0:rc1:*:*:*:*:*:* | 11.9.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.9.0:rc2:*:*:*:*:*:* | 11.9.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.9.0:rc3:*:*:*:*:*:* | 11.9.0 rc3 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.10.0:*:*:*:*:*:*:* | 11.10.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.10.0:rc1:*:*:*:*:*:* | 11.10.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.10.1:*:*:*:*:*:*:* | 11.10.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.10.1:rc1:*:*:*:*:*:* | 11.10.1 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.10.2:*:*:*:*:*:*:* | 11.10.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.11.0:*:*:*:*:*:*:* | 11.11.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.11.0:rc1:*:*:*:*:*:* | 11.11.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.12.0:*:*:*:*:*:*:* | 11.12.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.12.0:rc1:*:*:*:*:*:* | 11.12.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.12.1:*:*:*:*:*:*:* | 11.12.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.13.0:*:*:*:*:*:*:* | 11.13.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.13.0:rc1:*:*:*:*:*:* | 11.13.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.13.1:*:*:*:*:*:*:* | 11.13.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.14.0:*:*:*:lts:*:*:* | 11.14.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.14.0:rc1:*:*:*:*:*:* | 11.14.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.14.0:rc2:*:*:*:*:*:* | 11.14.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.14.1:*:*:*:*:*:*:* | 11.14.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.14.2:*:*:*:*:*:*:* | 11.14.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.15.0:rc1:*:*:*:*:*:* | 11.15.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.15.0:rc2:*:*:*:*:*:* | 11.15.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.15.1:*:*:*:*:*:*:* | 11.15.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.16.0:rc1:*:*:*:*:*:* | 11.16.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.17.0:rc1:*:*:*:*:*:* | 11.17.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.17.1:*:*:*:*:*:*:* | 11.17.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.18.0:*:*:*:*:*:*:* | 11.18.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.18.0:rc1:*:*:*:*:*:* | 11.18.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.19.0:rc1:*:*:*:*:*:* | 11.19.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.20.0:rc1:*:*:*:*:*:* | 11.20.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.21.0:rc1:*:*:*:*:*:* | 11.21.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.21.0:rc2:*:*:*:*:*:* | 11.21.0 rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.21.1:*:*:*:*:*:*:* | 11.21.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.21.2:*:*:*:*:*:*:* | 11.21.2 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.22.0:*:*:*:*:*:*:* | 11.22.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.22.0:rc1:*:*:*:*:*:* | 11.22.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.23.0:*:*:*:*:*:*:* | 11.23.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.23.0:rc1:*:*:*:*:*:* | 11.23.0 rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.23.1:*:*:*:*:*:*:* | 11.23.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.24.0:*:*:*:*:*:*:* | 11.24.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.24.1:*:*:*:*:*:*:* | 11.24.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.25.0:*:*:*:*:*:*:* | 11.25.0 | Vulnerable | Digium |
| cpe:2.3:a:digium:asterisk:11.25.1:*:*:*:*:*:*:* | 11.25.1 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:* | 11.6 cert1 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc1:*:*:*:*:*:* | 11.6 cert1_rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc2:*:*:*:*:*:* | 11.6 cert1_rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert10:*:*:*:*:*:* | 11.6 cert10 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert11:*:*:*:*:*:* | 11.6 cert11 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert12:*:*:*:*:*:* | 11.6 cert12 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert13:*:*:*:*:*:* | 11.6 cert13 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert14:*:*:*:*:*:* | 11.6 cert14 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc1:*:*:*:*:*:* | 11.6 cert14_rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc2:*:*:*:*:*:* | 11.6 cert14_rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert15:*:*:*:*:*:* | 11.6 cert15 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert16:*:*:*:*:*:* | 11.6 cert16 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:* | 11.6 cert2 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:* | 11.6 cert3 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:*:*:*:* | 11.6 cert4 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:*:*:*:* | 11.6 cert5 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:*:*:*:* | 11.6 cert6 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:*:*:*:* | 11.6 cert7 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert8:*:*:*:*:*:* | 11.6 cert8 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:11.6:cert9:*:*:*:*:*:* | 11.6 cert9 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:13.13:cert1:*:*:*:*:*:* | 13.13 cert1 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc1:*:*:*:*:*:* | 13.13 cert1_rc1 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc2:*:*:*:*:*:* | 13.13 cert1_rc2 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc3:*:*:*:*:*:* | 13.13 cert1_rc3 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc4:*:*:*:*:*:* | 13.13 cert1_rc4 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:13.13:cert2:*:*:*:*:*:* | 13.13 cert2 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:13.13:cert3:*:*:*:*:*:* | 13.13 cert3 | Vulnerable | Digium |
| cpe:2.3:a:digium:certified_asterisk:13.13:cert4:*:*:*:*:*:* | 13.13 cert4 | Vulnerable | Digium |
- cpe:2.3:a:digium:asterisk:13.2.0:*:*:*:*:*:*:* Versions 13.2.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.2.0:rc1:*:*:*:*:*:* Versions 13.2.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.2.1:*:*:*:*:*:*:* Versions 13.2.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.3.0:rc1:*:*:*:*:*:* Versions 13.3.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.3.2:*:*:*:*:*:*:* Versions 13.3.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.4.0:*:*:*:*:*:*:* Versions 13.4.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.4.0:rc1:*:*:*:*:*:* Versions 13.4.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.5.0:*:*:*:*:*:*:* Versions 13.5.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.5.0:rc1:*:*:*:*:*:* Versions 13.5.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.6.0:rc1:*:*:*:*:*:* Versions 13.6.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.7.0:rc1:*:*:*:*:*:* Versions 13.7.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.7.0:rc2:*:*:*:*:*:* Versions 13.7.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.7.1:*:*:*:*:*:*:* Versions 13.7.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.7.2:*:*:*:*:*:*:* Versions 13.7.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.8.0:*:*:*:*:*:*:* Versions 13.8.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.8.0:rc1:*:*:*:*:*:* Versions 13.8.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.8.1:*:*:*:*:*:*:* Versions 13.8.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.8.2:*:*:*:*:*:*:* Versions 13.8.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.9.0:*:*:*:*:*:*:* Versions 13.9.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.9.1:*:*:*:*:*:*:* Versions 13.9.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.10.0:*:*:*:*:*:*:* Versions 13.10.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.10.0:rc1:*:*:*:*:*:* Versions 13.10.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.11.0:*:*:*:*:*:*:* Versions 13.11.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.11.1:*:*:*:*:*:*:* Versions 13.11.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.11.2:*:*:*:*:*:*:* Versions 13.11.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.12:*:*:*:*:*:*:* Versions 13.12 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.12.0:*:*:*:*:*:*:* Versions 13.12.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.12.1:*:*:*:*:*:*:* Versions 13.12.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.12.2:*:*:*:*:*:*:* Versions 13.12.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.13:*:*:*:*:*:*:* Versions 13.13 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.13.0:*:*:*:*:*:*:* Versions 13.13.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.13.1:*:*:*:*:*:*:* Versions 13.13.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.14.0:*:*:*:*:*:*:* Versions 13.14.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.14.0:rc1:*:*:*:*:*:* Versions 13.14.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.14.0:rc2:*:*:*:*:*:* Versions 13.14.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.14.1:*:*:*:*:*:*:* Versions 13.14.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.15.0:*:*:*:*:*:*:* Versions 13.15.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.15.0:rc1:*:*:*:*:*:* Versions 13.15.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.15.0:rc2:*:*:*:*:*:* Versions 13.15.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.15.0:rc3:*:*:*:*:*:* Versions 13.15.0 rc3 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.15.1:*:*:*:*:*:*:* Versions 13.15.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.16.0:*:*:*:*:*:*:* Versions 13.16.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.16.0:rc1:*:*:*:*:*:* Versions 13.16.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.16.0:rc2:*:*:*:*:*:* Versions 13.16.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.17.0:*:*:*:*:*:*:* Versions 13.17.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:13.17.0:rc1:*:*:*:*:*:* Versions 13.17.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.0:*:*:*:*:*:*:* Versions 14.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.0.0:*:*:*:*:*:*:* Versions 14.0.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.0.0:beta1:*:*:*:*:*:* Versions 14.0.0 beta1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.0.0:beta2:*:*:*:*:*:* Versions 14.0.0 beta2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.0.0:rc1:*:*:*:*:*:* Versions 14.0.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.0.0:rc2:*:*:*:*:*:* Versions 14.0.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.0.1:*:*:*:*:*:*:* Versions 14.0.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.0.2:*:*:*:*:*:*:* Versions 14.0.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.01:*:*:*:*:*:*:* Versions 14.01 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.1.0:*:*:*:*:*:*:* Versions 14.1.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.1.1:*:*:*:*:*:*:* Versions 14.1.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.1.2:*:*:*:*:*:*:* Versions 14.1.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.02:*:*:*:*:*:*:* Versions 14.02 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.2:*:*:*:*:*:*:* Versions 14.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.2.0:*:*:*:*:*:*:* Versions 14.2.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.2.1:*:*:*:*:*:*:* Versions 14.2.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.3.0:*:*:*:*:*:*:* Versions 14.3.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.3.0:rc1:*:*:*:*:*:* Versions 14.3.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.3.0:rc2:*:*:*:*:*:* Versions 14.3.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.3.1:*:*:*:*:*:*:* Versions 14.3.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.4.0:*:*:*:*:*:*:* Versions 14.4.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.4.0:rc1:*:*:*:*:*:* Versions 14.4.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.4.0:rc2:*:*:*:*:*:* Versions 14.4.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.4.0:rc3:*:*:*:*:*:* Versions 14.4.0 rc3 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.4.1:*:*:*:*:*:*:* Versions 14.4.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.5.0:*:*:*:*:*:*:* Versions 14.5.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.5.0:rc1:*:*:*:*:*:* Versions 14.5.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.5.0:rc2:*:*:*:*:*:* Versions 14.5.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.6.0:*:*:*:*:*:*:* Versions 14.6.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:14.6.0:rc1:*:*:*:*:*:* Versions 14.6.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.0.0:*:*:*:*:*:*:* Versions 11.0.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.0.0:beta1:*:*:*:*:*:* Versions 11.0.0 beta1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.0.0:beta2:*:*:*:*:*:* Versions 11.0.0 beta2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.0.0:rc1:*:*:*:*:*:* Versions 11.0.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.0.0:rc2:*:*:*:*:*:* Versions 11.0.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.0.1:*:*:*:*:*:*:* Versions 11.0.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.0.2:*:*:*:*:*:*:* Versions 11.0.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.1.0:*:*:*:*:*:*:* Versions 11.1.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.1.0:rc1:*:*:*:*:*:* Versions 11.1.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.1.0:rc2:*:*:*:*:*:* Versions 11.1.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.1.0:rc3:*:*:*:*:*:* Versions 11.1.0 rc3 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.1.1:*:*:*:*:*:*:* Versions 11.1.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.1.2:*:*:*:*:*:*:* Versions 11.1.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.2.0:rc1:*:*:*:*:*:* Versions 11.2.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.2.1:*:*:*:*:*:*:* Versions 11.2.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.2.2:*:*:*:*:*:*:* Versions 11.2.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.4.0:rc4:*:*:*:*:*:* Versions 11.4.0 rc4 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.6.0:*:*:*:*:*:*:* Versions 11.6.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.6.0:rc1:*:*:*:*:*:* Versions 11.6.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.6.0:rc2:*:*:*:*:*:* Versions 11.6.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.6.1:*:*:*:*:*:*:* Versions 11.6.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.7.0:*:*:*:*:*:*:* Versions 11.7.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.7.0:rc1:*:*:*:*:*:* Versions 11.7.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.7.0:rc2:*:*:*:*:*:* Versions 11.7.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.8.0:-:*:*:*:*:*:* Versions 11.8.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.8.0:rc1:*:*:*:*:*:* Versions 11.8.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.8.0:rc2:*:*:*:*:*:* Versions 11.8.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.8.0:rc3:*:*:*:*:*:* Versions 11.8.0 rc3 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.8.1:*:*:*:*:*:*:* Versions 11.8.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.9.0:*:*:*:*:*:*:* Versions 11.9.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.9.0:rc1:*:*:*:*:*:* Versions 11.9.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.9.0:rc2:*:*:*:*:*:* Versions 11.9.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.9.0:rc3:*:*:*:*:*:* Versions 11.9.0 rc3 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.10.0:*:*:*:*:*:*:* Versions 11.10.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.10.0:rc1:*:*:*:*:*:* Versions 11.10.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.10.1:*:*:*:*:*:*:* Versions 11.10.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.10.1:rc1:*:*:*:*:*:* Versions 11.10.1 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.10.2:*:*:*:*:*:*:* Versions 11.10.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.11.0:*:*:*:*:*:*:* Versions 11.11.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.11.0:rc1:*:*:*:*:*:* Versions 11.11.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.12.0:*:*:*:*:*:*:* Versions 11.12.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.12.0:rc1:*:*:*:*:*:* Versions 11.12.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.12.1:*:*:*:*:*:*:* Versions 11.12.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.13.0:*:*:*:*:*:*:* Versions 11.13.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.13.0:rc1:*:*:*:*:*:* Versions 11.13.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.13.1:*:*:*:*:*:*:* Versions 11.13.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.14.0:*:*:*:lts:*:*:* Versions 11.14.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.14.0:rc1:*:*:*:*:*:* Versions 11.14.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.14.0:rc2:*:*:*:*:*:* Versions 11.14.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.14.1:*:*:*:*:*:*:* Versions 11.14.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.14.2:*:*:*:*:*:*:* Versions 11.14.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.15.0:rc1:*:*:*:*:*:* Versions 11.15.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.15.0:rc2:*:*:*:*:*:* Versions 11.15.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.15.1:*:*:*:*:*:*:* Versions 11.15.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.16.0:rc1:*:*:*:*:*:* Versions 11.16.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.17.0:rc1:*:*:*:*:*:* Versions 11.17.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.17.1:*:*:*:*:*:*:* Versions 11.17.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.18.0:*:*:*:*:*:*:* Versions 11.18.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.18.0:rc1:*:*:*:*:*:* Versions 11.18.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.19.0:rc1:*:*:*:*:*:* Versions 11.19.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.20.0:rc1:*:*:*:*:*:* Versions 11.20.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.21.0:rc1:*:*:*:*:*:* Versions 11.21.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.21.0:rc2:*:*:*:*:*:* Versions 11.21.0 rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.21.1:*:*:*:*:*:*:* Versions 11.21.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.21.2:*:*:*:*:*:*:* Versions 11.21.2 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.22.0:*:*:*:*:*:*:* Versions 11.22.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.22.0:rc1:*:*:*:*:*:* Versions 11.22.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.23.0:*:*:*:*:*:*:* Versions 11.23.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.23.0:rc1:*:*:*:*:*:* Versions 11.23.0 rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.23.1:*:*:*:*:*:*:* Versions 11.23.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.24.0:*:*:*:*:*:*:* Versions 11.24.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.24.1:*:*:*:*:*:*:* Versions 11.24.1 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.25.0:*:*:*:*:*:*:* Versions 11.25.0 Vulnerable ·Digium
- cpe:2.3:a:digium:asterisk:11.25.1:*:*:*:*:*:*:* Versions 11.25.1 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert1:*:*:*:*:*:* Versions 11.6 cert1 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc1:*:*:*:*:*:* Versions 11.6 cert1_rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert1_rc2:*:*:*:*:*:* Versions 11.6 cert1_rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert10:*:*:*:*:*:* Versions 11.6 cert10 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert11:*:*:*:*:*:* Versions 11.6 cert11 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert12:*:*:*:*:*:* Versions 11.6 cert12 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert13:*:*:*:*:*:* Versions 11.6 cert13 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert14:*:*:*:*:*:* Versions 11.6 cert14 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc1:*:*:*:*:*:* Versions 11.6 cert14_rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert14_rc2:*:*:*:*:*:* Versions 11.6 cert14_rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert15:*:*:*:*:*:* Versions 11.6 cert15 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert16:*:*:*:*:*:* Versions 11.6 cert16 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert2:*:*:*:*:*:* Versions 11.6 cert2 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert3:*:*:*:*:*:* Versions 11.6 cert3 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert4:*:*:*:*:*:* Versions 11.6 cert4 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert5:*:*:*:*:*:* Versions 11.6 cert5 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert6:*:*:*:*:*:* Versions 11.6 cert6 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert7:*:*:*:*:*:* Versions 11.6 cert7 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert8:*:*:*:*:*:* Versions 11.6 cert8 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:11.6:cert9:*:*:*:*:*:* Versions 11.6 cert9 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:13.13:cert1:*:*:*:*:*:* Versions 13.13 cert1 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc1:*:*:*:*:*:* Versions 13.13 cert1_rc1 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc2:*:*:*:*:*:* Versions 13.13 cert1_rc2 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc3:*:*:*:*:*:* Versions 13.13 cert1_rc3 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:13.13:cert1_rc4:*:*:*:*:*:* Versions 13.13 cert1_rc4 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:13.13:cert2:*:*:*:*:*:* Versions 13.13 cert2 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:13.13:cert3:*:*:*:*:*:* Versions 13.13 cert3 Vulnerable ·Digium
- cpe:2.3:a:digium:certified_asterisk:13.13:cert4:*:*:*:*:*:* Versions 13.13 cert4 Vulnerable ·Digium
Remediation
No fixed version listed by the sources yet.
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2017-14099
- 2026-10-03 Alias added: GHSA-4q58-999f-6rpw
References
More Digium Asterisk vulnerabilities
- TI-2006-05256 Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c)… CVSS 2.0HIGH 7.5
- TI-2017-12542 An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older… CVSS 3.0HIGH 7.5
- TI-2023-27195 Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation CVSS 3.1HIGH 7.5
- TI-2017-13083 An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and… CVSS 3.0HIGH 7.5
- TI-2019-13459 An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and… CVSS 3.1HIGH 8.8
- TI-2018-05283 A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5… CVSS 3.0HIGH 7.5
Sources
- CVE-2017-14099 · CVE Program
- CVE-2017-14099 · NVD
- FIRST EPSS
- GHSA-4q58-999f-6rpw · GitHub Advisory Database · CC BY 4.0
- CVE-2017-14099 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences