Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: asterisk Component: Certified Asterisk Clear all filters
TI-2021-21526 CVE-2021-46837 · GHSA-544v-7w28-m77x

res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x…

Priority LOW 36

res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0467 Published 2022-08-30 No fix listed CWE-476
TI-2022-07661 CVE-2022-23608

Use after free in PJSIP

Priority MEDIUM 50

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04022 Published 2022-02-22 No fix listed CWE-416
TI-2022-06096 CVE-2022-21723

Out-of-bounds read in multipart parsing in PJSIP

Priority MEDIUM 52

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.04357 Published 2022-01-27 No fix listed CWE-125
TI-2021-15581 CVE-2021-37706

Potential integer underflow upon receiving STUN message in PJSIP

Priority MEDIUM 50

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04924 Published 2021-12-22 No fix listed CWE-191
TI-2013-02348 CVE-2013-2686 · GHSA-32mc-px3q-67r4

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before…

Priority LOW 27

main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02126 Published 2013-03-29 No fix listed CWE-119
TI-2013-02024 CVE-2013-2264 · GHSA-79cp-774x-5w3c

The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before…

Priority LOW 25

The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and A…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01252 Published 2013-03-29 No fix listed CWE-200
TI-2012-01955 CVE-2012-2186 · GHSA-27ch-ccxg-45pf

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before…

Priority MEDIUM 45

Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 1…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03558 Published 2012-08-31 No fix listed
TI-2012-02559 CVE-2012-2948 · GHSA-chr5-w9ff-5gcw

chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert…

Priority LOW 23

chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1 allows remote authenticated users to cause…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.02119 Published 2012-06-02 No fix listed CWE-399