OS
Product
Open Source
22
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Open Source to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2013-2686 | – | Apr 1 | main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2013-2685 | – | Apr 1 | Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long… Affected: 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.1; +10 more |
| CVE-2013-2264 | – | Apr 1 | The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2012-2186 | – | Aug 31 | Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2012-2948 | – | Jun 2 | chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2012-2416 | – | Apr 30 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid… Affected: 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; +34 more |
| CVE-2012-2415 | – | Apr 30 | Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 allows… Affected: 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; +34 more |
| CVE-2012-2414 | – | Apr 30 | main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before… Affected: 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; +34 more |
| CVE-2012-0885 | – | Jan 25 | chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp module is used and media support is improperly configured, allows remote… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2011-4063 | – | Oct 21 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which… Affected: 1.8.7; 10.0.0 |
| CVE-2009-2346 | – | Sep 8 | The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x… Affected: 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.1; +34 more |
| CVE-2009-0041 | – | Jan 14 | IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and… Affected: through 1.2.30.4; through 1.4.23; through 1.6.0.3; 1.2.0; 1.2.0; 1.2.0; +34 more |
| CVE-2008-5558 | – | Dec 17 | Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of… Affected: 1.2.26; 1.2.26; 1.2.26.1; 1.2.26.1; 1.2.26.2; 1.2.26.2; +6 more |
| CVE-2008-3264 | – | Jul 24 | The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x… Affected: 1.0; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.3.4; +34 more |
| CVE-2008-2119 | – | Jun 4 | Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote… Affected: through 1.2.28; 1.0; 1.0.0; 1.0.1; 1.0.2; 1.0.3; +34 more |
| CVE-2008-1923 | – | Apr 23 | The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an… Affected: 1.0; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +34 more |
| CVE-2008-1897 | – | Apr 23 | The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before… Affected: through 1.2.27; through 1.4.19; 1.0; 1.0; 1.0; 1.0.0; +34 more |
| CVE-2008-1289 | – | Mar 24 | Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW… Affected: through 1.4.18; through 1.4.19; through 1.6.0_beta5 |
| CVE-2008-1333 | – | Mar 20 | Format string vulnerability in Asterisk Open Source 1.6.x before 1.6.0-beta6 might allow remote attackers to execute arbitrary code via logging messages that are not properly… Affected: 1.6.0_beta1; 1.6.0_beta2; 1.6.0_beta3; 1.6.0_beta4; 1.6.0_beta5 |
| CVE-2008-1332 | – | Mar 20 | Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before… Affected: through 1.2.26; through 1.4.17; through 1.4.19; 1.0; 1.0.0; 1.0.1; +34 more |
| CVE-2008-0095 | – | Jan 8 | The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4… Affected: through 1.4.16 |
| CVE-2007-6430 | – | Dec 20 | Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations… Affected: 1.2.0beta1; 1.2.0beta2; 1.2.5; 1.2.6; 1.2.7; 1.2.8; +31 more |
Showing 22