Vulnerabilities

Filters

Reset all

2 selected

51 records

Sort

Vendor: Digium Component: Certified Asterisk Clear all filters

TI-2022-09925 CVE-2022-26651 · GHSA-6pcv-f66p-pqqj

An issue was discovered in Asterisk through 19.x and Certified Asterisk through…

MEDIUM 52

An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07026 Published 2022-04-15 No fix listed CWE-89

TI-2021-12232 CVE-2021-32558 · GHSA-xhjf-mf8w-q63p

An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1…

MEDIUM 45

An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.09223 Published 2021-07-27 No fix listed CWE-74

TI-2021-08392 CVE-2021-26713 · GHSA-24f6-gm96-3c56

A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1…

LOW 33

A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 allows an authenticated WebRTC client to cause a…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01868 Published 2021-02-19 No fix listed CWE-787

TI-2021-08391 CVE-2021-26712 · GHSA-5ph6-fxv2-7rf2

Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and…

LOW 39

Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replayin…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03632 Published 2021-02-18 No fix listed

TI-2021-08513 CVE-2021-26906 · GHSA-rjqf-qvfr-v23c

An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x…

LOW 31

An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02547 Published 2021-02-18 No fix listed CWE-404

TI-2021-08396 CVE-2021-26717 · GHSA-9mrj-wq9r-h4vw

An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and…

LOW 37

An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02204 Published 2021-02-18 No fix listed

TI-2020-17177 CVE-2020-28327 · GHSA-ggx6-v629-c48v

A res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1…

LOW 28

A res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.01939 Published 2020-11-06 No fix listed CWE-404

TI-2019-13459 CVE-2019-18610 · GHSA-4mx6-qmp8-735w

An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and…

HIGH 69

An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.50076 Published 2019-11-22 No fix listed CWE-862

TI-2019-13672 CVE-2019-18976 · GHSA-6fr3-g4mr-859f

An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified…

MEDIUM 47

An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12789 Published 2019-11-22 No fix listed CWE-476

TI-2019-13527 CVE-2019-18790 · GHSA-xv3q-rp6x-hwhw

An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2…

LOW 36

An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.04188 Published 2019-11-22 No fix listed CWE-862

TI-2019-09859 CVE-2019-13161 · GHSA-5x75-h4p9-mf5p

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through…

LOW 31

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.03939 Published 2019-07-12 No fix listed CWE-476

TI-2019-09608 CVE-2019-12827 · GHSA-3x27-45gw-9p39

Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0…

LOW 36

Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.04045 Published 2019-07-12 No fix listed CWE-787

TI-2018-12332 CVE-2018-17281 · GHSA-64m8-fx32-3864

There is a stack consumption vulnerability in the res_http_websocket.so module of…

HIGH 65

There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk through 13.21-cert2.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.52449 Published 2018-09-24 No fix listed CWE-400

TI-2018-08769 CVE-2018-12227 · GHSA-cvxq-f65j-c34v

An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7…

LOW 30

An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Certified Asterisk 13.18-cert before 13.18-cert4 and 13.21-cert before 13.21-cert2.

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.03363 Published 2018-06-12 No fix listed CWE-200

TI-2018-05285 CVE-2018-7286 · GHSA-c328-7q8p-p26v

An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x…

MEDIUM 61

An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2.

CVSS 3.0MEDIUM 6.5 Network Low privileges No interaction EPSS 0.52733 Published 2018-02-22 No fix listed

TI-2018-05283 CVE-2018-7284 · GHSA-h9x3-h6rr-35ww

A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5…

HIGH 69

A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.66167 Published 2018-02-22 No fix listed CWE-119

TI-2017-13083 CVE-2017-17850 · GHSA-cx4v-84p4-4vh6

An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and…

HIGH 72

An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.75351 Published 2017-12-23 No fix listed CWE-20

TI-2017-12929 CVE-2017-17664 · GHSA-v98f-vhv3-8x27

A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x…

MEDIUM 51

A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.32431 Published 2017-12-13 No fix listed CWE-119

TI-2017-12542 CVE-2017-17090 · GHSA-m542-x3mj-mpgq

An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older…

HIGH 74

An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.82196 Published 2017-12-02 No fix listed CWE-459

TI-2017-12265 CVE-2017-16672 · GHSA-6j42-f94q-5pq7

An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and…

LOW 34

An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.04678 Published 2017-11-09 No fix listed CWE-772

TI-2017-12264 CVE-2017-16671 · GHSA-6vm7-9fw2-vx89

A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14…

MEDIUM 45

A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04169 Published 2017-11-09 No fix listed CWE-119

TI-2017-10702 CVE-2017-14603 · GHSA-p6hc-c268-h4wx

In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and…

LOW 39

In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading stale buffe…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03156 Published 2017-10-09 No fix listed CWE-200

TI-2017-10268 CVE-2017-14100 · GHSA-rx69-4xhx-6q93

In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and…

MEDIUM 57

In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command execution is possible.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.13415 Published 2017-09-02 No fix listed CWE-78

TI-2017-10267 CVE-2017-14099 · GHSA-4q58-999f-6rpw

In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x…

MEDIUM 40

In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized data disclosure (media takeo…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0433 Published 2017-09-02 No fix listed CWE-200

TI-2017-06796 CVE-2017-9372 · GHSA-f9w9-cxp5-6pq8

PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1…

MEDIUM 40

PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (buffer overflow an…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03989 Published 2017-06-02 No fix listed CWE-119