Vulnerabilities

TI-2008-03126 CVE-2008-3264 · GHSA-mgmv-gxwr-mfmr

The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before…

MEDIUM 40

The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0338 Published 2008-07-24 No fix listed CWE-287

TI-2008-01847 CVE-2008-1923 · GHSA-3p74-pwfx-pcgr

The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before…

LOW 34

The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW mes…

CVSS 2.0HIGH 7.1 Network No auth Interaction — EPSS 0.014 Published 2008-04-23 No fix listed CWE-16

TI-2008-01822 CVE-2008-1897 · GHSA-653q-fj3p-cqrg

The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28…

LOW 25

The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Applian…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02743 Published 2008-04-23 No fix listed CWE-287

TI-2008-01337 CVE-2008-1390 · GHSA-4h7j-rpcg-6w8h

The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x…

MEDIUM 47

The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.03837 Published 2008-03-24 No fix listed CWE-255

TI-2008-01239 CVE-2008-1289 · GHSA-xjqv-ch5c-vc5h

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3…

MEDIUM 46

Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.11523 Published 2008-03-24 No fix listed CWE-119

TI-2008-01282 CVE-2008-1332 · GHSA-p49c-76rr-74ww

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before…

MEDIUM 43

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Applian…

CVSS 2.0HIGH 8.8 Network No auth Interaction — EPSS 0.02327 Published 2008-03-20 No fix listed CWE-264

TI-2008-00085 CVE-2008-0095 · GHSA-hvrv-phcf-pfqg

The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition…

MEDIUM 44

The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x bef…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.25423 Published 2008-01-08 No fix listed CWE-399

TI-2007-04315 CVE-2007-4455 · GHSA-c3jc-cr5w-8999

The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11…

LOW 26

The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote at…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01775 Published 2007-08-22 No fix listed

TI-2007-04143 CVE-2007-4280 · GHSA-3p5p-863p-q64f

The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10…

LOW 19

The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01149 Published 2007-08-09 No fix listed

TI-2007-03654 CVE-2007-3765 · GHSA-f9w4-q8jc-qc4v

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7…

LOW 26

The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted ST…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0169 Published 2007-07-18 No fix listed

TI-2007-03653 CVE-2007-3764 · GHSA-c8c6-m3x8-7cq5

The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8…

MEDIUM 47

The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows rem…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.3152 Published 2007-07-18 No fix listed

TI-2007-03652 CVE-2007-3763 · GHSA-822c-3x4j-h56q

The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8…

MEDIUM 45

The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.2656 Published 2007-07-18 No fix listed

TI-2007-03651 CVE-2007-3762 · GHSA-cwmp-cc64-x5pj

Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before…

MEDIUM 48

Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s8…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.05506 Published 2007-07-18 No fix listed

Vulnerabilities

Filters