CE
Product
certified-asterisk
30
CVEs
0
On KEV
9.8
Max CVSS
19
New 30D
Severity mix
Critical 3High 11Medium 8Low 4
Watch
Add certified-asterisk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-57203 New | 6.9 | Oct 27 | Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
| CVE-2026-57193 New | 6.9 | Oct 26 | Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure) Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
| CVE-2026-57185 New | 6.5 | Oct 27 | Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
| CVE-2021-46837 | 6.5 | Aug 30 | res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash… Affected: 16.8.0; 16.8.0; 16.8.0; 16.8.0; 16.8.0; 16.8.0; +1 more |
| CVE-2020-28242 | 6.5 | Nov 6 | An issue was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1 and Certified Asterisk before 16.8-cert5 Affected: through 16.8.0 |
| CVE-2026-57184 New | 6.3 | Oct 26 | Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon) Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
| CVE-2026-57192 New | 6.0 | Oct 27 | Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
| CVE-2026-57194 New | 5.9 | Oct 27 | Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk Affected: < 20.7-cert11; >= 22.8-cert1-pre1, < 22.8-cert3 |
Showing 8