Login Request a demo
AS
Product
asterisk
by asterisk · last CVE Oct 27, 2026
41
CVEs
0
On KEV
8.8
Max CVSS
20
New 30D
Vulnerabilities41In the news0Timeline
Severity mix
Critical 0High 11Medium 7Low 4
Severity
All severities41Critical0High11Medium7Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add asterisk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-42365
8.8
5%
Aug 8
Asterisk is an open source private branch exchange (PBX) and telephony toolkit
Affected: before 18.24.2; 19.0.0 before 20.9.1; 21.4.0
CVE-2026-57191
New
8.2–Oct 27
Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57202
New
8.1–Oct 27
Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57197
New
7.7–Oct 27
Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57186
New
7.5–Oct 27
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
Affected: >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57200
New
7.5–Oct 27
Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57195
New
7.5–Oct 27
Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57201
New
7.5–Oct 27
Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57188
New
7.1–Oct 27
Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57187
New
7.1
0%
Oct 26
Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57190
New
7.0–Oct 27
Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57203
New
6.9–Oct 27
Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57193
New
6.9
2%
Oct 26
Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57185
New
6.5–Oct 27
Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57184
New
6.3
1%
Oct 26
Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57192
New
6.0–Oct 27
Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57194
New
5.9–Oct 27
Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2024-42491
5.7
1%
Sep 5
A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used
Affected: < 18.24.3; >= 19.0.0, < 20.9.3; >= 21.0.0, < 21.4.3; < 18.9-cert12; >= 19.0, < 20.7-cert2
CVE-2026-57199
New
2.3–Oct 27
Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57189
New
2.3–Oct 27
Asterisk: Possible RED T.140 Generation Accumulation OOB Write
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57198
New
2.3–Oct 27
Asterisk: Possible RED T.140 Heap Buffer Overflow
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2026-57196
New
2.3
1%
Oct 26
Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages
Affected: < 20.20.1; >= 21.0.0-pre1, < 21.12.3; >= 22.0.0-pre1, < 22.10.1; >= 23.0.0-pre1, < 23.4.1
CVE-2010-0441
–
3%
Feb 4
Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a…
Affected: 1.6.0; 1.6.0.1; 1.6.0.2; 1.6.0.3; 1.6.0.5; 1.6.0.6; +34 more
CVE-2009-2346
–
3%
Sep 8
The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x…
Affected: b.1.3.2; b.1.3.3; b.2.2.0; b.2.2.1; b.2.3.1; b.2.3.2; +25 more
CVE-2008-3263
–
28%
Jul 22
The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before…
Affected: 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; 0.1.5; +34 more
CVE-2008-1390
–
4%
Mar 24
The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance…
Affected: 1.4.1; 1.4.2; 1.4.3; 1.4.4; 1.4.5; 1.4.6; +15 more
CVE-2008-1332
–
2%
Mar 20
Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before…
Affected: a; b.1.3.2; b.1.3.3; b.2.2.0; b.2.2.1; b.2.3.1; +9 more
CVE-2007-4521
–
3%
Aug 28
Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an…
Affected: 1.4.5; 1.4.6; 1.4.7; 1.4.8; 1.4.9; 1.4.10; +1 more
CVE-2007-4455
–
2%
Aug 22
The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk…
Affected: through 1.4.9
CVE-2007-4280
–
1%
Aug 9
The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3…
Affected: through 1.4.9
CVE-2007-3763
–
27%
Jul 18
The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before…
Affected: 1.0; 1.0.6; 1.0.7; 1.0.8; 1.0.9; 1.0.10; +25 more
CVE-2007-3765
–
2%
Jul 18
The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a…
Affected: 1.0; 1.0.6; 1.0.7; 1.0.8; 1.0.9; 1.0.10; +25 more
CVE-2007-3764
–
32%
Jul 18
The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before…
Affected: 1.0; 1.0.6; 1.0.7; 1.0.8; 1.0.9; 1.0.10; +25 more
CVE-2007-3762
–
6%
Jul 18
Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7,…
Affected: 1.0; 1.0.6; 1.0.7; 1.0.8; 1.0.9; 1.0.10; +25 more
CVE-2007-2488
–
4%
May 7
The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows remote attackers to trigger loss of transmitted data, and…
Affected: through 1.4.4_2007-04-27
CVE-2007-2297
–
2%
Apr 26
The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP packets that do not contain a valid response code, which allows…
Affected: 1.2.0_beta1; 1.2.0_beta2; 1.2.10; 1.2.11; 1.2.12; 1.2.13; +7 more
CVE-2007-2294
–
4%
Apr 26
The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of service (crash) by using MD5 authentication to authenticate a…
Affected: 1.2.0_beta1; 1.2.0_beta2; 1.2.5; 1.2.6; 1.2.7; 1.2.8; +12 more
CVE-2007-2293
–
24%
Apr 26
Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3 allow remote attackers to execute…
Affected: 1.4.1; 1.4.2; 1.4_beta
CVE-2007-1595
–
3%
Mar 22
The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an…
Affected: 1.2.13
CVE-2007-1594
–
3%
Mar 22
The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP Response code 0…
Affected: 0.1.7; 0.1.8; 0.1.9; 0.1.9_1; 0.1.11; 0.2; +31 more
CVE-2007-1561
–
15%
Mar 21
The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP INVITE message with an SDP containing…
Affected: 1.2.14; 1.2.15; 1.2.16; 1.4.1
Showing 41