AS
Product
Asterisk
114
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 24Medium 20Low 0
Watch
Add Asterisk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-6610 | – | Nov 26 | Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the res_fax_spandsp module, allows remote authenticated… Affected: 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.1.0; +34 more |
| CVE-2014-6609 | – | Nov 26 | The res_pjsip_pubsub module in Asterisk Open Source 12.x before 12.5.1 allows remote authenticated users to cause a denial of service (crash) via crafted headers in a SIP… Affected: 12.0.0; 12.1.0; 12.1.0; 12.1.0; 12.1.0; 12.2.0; +10 more |
| CVE-2014-8418 | – | Nov 24 | The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before… Affected: 1.8.0 through 1.8.32.0; 11.0.0 before 11.14.1; 12.0.0 before 12.7.1 |
| CVE-2014-8417 | – | Nov 24 | ConfBridge in Asterisk 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 11.6 before 11.6-cert8 allows remote authenticated users to (1) gain… Affected: 11.0.0 before 11.14.1; 12.0.0 before 12.7.1; 13.0.0 before 13.0.1 |
| CVE-2014-8416 | – | Nov 24 | Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote… Affected: 12.0.0 before 12.7.1; 13.0.0 before 13.0.1 |
| CVE-2014-8415 | – | Nov 24 | Race condition in the chan_pjsip channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 allows remote attackers to cause a denial of service (assertion… Affected: 12.0.0 before 12.7.1; 13.0.0 before 13.0.1 |
| CVE-2014-8414 | – | Nov 24 | ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes, which allows remote attackers to cause a denial of… Affected: through 11.14.0 |
| CVE-2014-8413 | – | Nov 24 | The res_pjsip_acl module in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 does not properly create and load ACLs defined in pjsip.conf at startup, which allows… Affected: 12.0.0 before 12.7.1; 13.0.0 before 13.0.1 |
| CVE-2014-8412 | – | Nov 24 | The (1) VoIP channel drivers, (2) DUNDi, and (3) Asterisk Manager Interface (AMI) in Asterisk Open Source 1.8.x before 1.8.32.1, 11.x before 11.14.1, 12.x before 12.7.1, and 13.x… Affected: 1.8.0 before 1.8.32.1; 11.0.0 before 11.14.1; 12.0.0 before 12.7.1; 13.0.0 before 13.0.1 |
| CVE-2014-4048 | – | Jun 17 | The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is… Affected: through 12.3.0; 12.0.0; 12.1.0; 12.1.0; 12.1.0; 12.1.0; +7 more |
| CVE-2014-4047 | – | Jun 17 | Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 before 1.8.15-cert6 and 11.6 before 11.6-cert3 allows remote… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2014-4046 | – | Jun 17 | Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell… Affected: 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.1; +34 more |
| CVE-2014-4045 | – | Jun 17 | The Publish/Subscribe Framework in the PJSIP channel driver in Asterisk Open Source 12.x before 12.3.1, when sub_min_expiry is set to zero, allows remote attackers to cause a… Affected: 12.0.0; 12.1.0; 12.1.0; 12.1.0; 12.1.0; 12.1.1; +7 more |
| CVE-2014-2289 | – | Apr 18 | res/res_pjsip_exten_state.c in the PJSIP channel driver in Asterisk Open Source 12.x before 12.1.0 allows remote authenticated users to cause a denial of service (crash) via a… Affected: 12.0.0; 12.1.0; 12.1.0; 12.1.0 |
| CVE-2014-2288 | – | Apr 18 | The PJSIP channel driver in Asterisk Open Source 12.x before 12.1.1, when qualify_frequency "is enabled on an AOR and the remote SIP server challenges for authentication of the… Affected: 12.0.0; 12.1.0; 12.1.0; 12.1.0; 12.1.0 |
| CVE-2014-2287 | – | Apr 18 | channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2014-2286 | – | Apr 18 | main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2013-7100 | – | Dec 19 | Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with… Affected: 1.8.17.0; 1.8.17.0; 1.8.17.0; 1.8.17.0; 1.8.18.0; 1.8.18.0; +34 more |
| CVE-2013-5642 | – | Sep 9 | The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Certified Asterisk 1.8.15 before… Affected: 1.8.17.0; 1.8.17.0; 1.8.17.0; 1.8.17.0; 1.8.18.0; 1.8.18.0; +34 more |
| CVE-2013-5641 | – | Sep 9 | The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1, and 11.x before 11.5.1 and Certified Asterisk 1.8.15… Affected: 1.8.17.0; 1.8.17.0; 1.8.17.0; 1.8.17.0; 1.8.18.0; 1.8.18.0; +34 more |
| CVE-2012-5977 | – | Jan 4 | Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones… Affected: through 1.8.19.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2012-5976 | – | Jan 4 | Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before… Affected: through 1.8.19.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2012-1184 | – | Sep 18 | Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows remote attackers to cause a denial of… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2012-1183 | – | Sep 18 | Stack-based buffer overflow in the milliwatt_generate function in the Miliwatt application in Asterisk 1.4.x before 1.4.44, 1.6.x before 1.6.2.23, 1.8.x before 1.8.10.1, and 10.x… Affected: 1.4.0 before 1.4.44; 1.6.0 before 1.6.2.23; 1.8.0 before 1.8.10.1; 10.0.0 before 10.2.1 |
| CVE-2012-4737 | – | Aug 31 | channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2012-3812 | – | Jul 9 | Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2012-3863 | – | Jul 9 | channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2012-3553 | – | Jun 19 | chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause a denial of service (NULL pointer… Affected: 10.0.0; 10.0.0; 10.0.0; 10.0.0; 10.0.0; 10.0.0; +26 more |
| CVE-2012-2947 | – | Jun 2 | chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and 10.x before 10.4.1, when a certain… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2011-4598 | – | Dec 15 | The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 and 1.8.x before 1.8.7.2, when automon is enabled, allows remote attackers… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2011-4597 | – | Dec 15 | The SIP over UDP implementation in Asterisk Open Source 1.4.x before 1.4.43, 1.6.x before 1.6.2.21, and 1.8.x before 1.8.7.2 uses different port numbers for responses to invalid… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2011-2666 | – | Jul 6 | The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option,… Affected: 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; 1.6.2.0; +34 more |
| CVE-2011-2665 | – | Jul 6 | reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.3 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +26 more |
| CVE-2011-2536 | – | Jul 6 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2011-2535 | – | Jul 6 | chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2011-2529 | – | Jul 6 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows… Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2011-2216 | – | Jun 6 | reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.4.2 does not initialize certain strings, which allows remote attackers to cause a denial of… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +25 more |
| CVE-2011-1599 | – | Apr 27 | manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk… Affected: 1.4.0; 1.4.0; 1.4.0; 1.4.0; 1.4.0; 1.4.1; +34 more |
| CVE-2011-1507 | – | Apr 27 | Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.8.x before 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not… Affected: 1.4.0; 1.4.0; 1.4.0; 1.4.0; 1.4.0; 1.4.1; +34 more |
| CVE-2011-1175 | – | Mar 31 | tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before 1.6.1.23, 1.6.2.x before 1.6.2.17.1, and 1.8.x before 1.8.3.1 allows remote attackers to cause a denial of… Affected: 1.6.1; 1.6.1; 1.6.1; 1.6.1; 1.6.1; 1.6.1; +34 more |
| CVE-2011-1174 | – | Mar 31 | manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory… Affected: 1.6.1; 1.6.1; 1.6.1; 1.6.1; 1.6.1; 1.6.1; +34 more |
| CVE-2011-1147 | – | Mar 15 | Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2,… Affected: 1.4.0; 1.4.0; 1.4.0; 1.4.0; 1.4.0; 1.4.1; +34 more |
| CVE-2011-0495 | – | Jan 20 | Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.;… Affected: before c.3.6.2; 1.2.0 through 1.2.40; 1.4.0 before 1.4.38.1; 1.4.39 before 1.4.39.1; 1.6.1 before 1.6.1.21; 1.6.2 before 1.6.2.15.1; +3 more |
| CVE-2010-1224 | – | Apr 1 | main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce remote host access controls when CIDR… Affected: 1.6.0; 1.6.0.1; 1.6.0.2; 1.6.0.3; 1.6.0.5; 1.6.0.6; +34 more |
| CVE-2010-0685 | – | Feb 23 | The design of the dialplan functionality in Asterisk Open Source 1.2.x, 1.4.x, and 1.6.x; and Asterisk Business Edition B.x.x and C.x.x, when using the ${EXTEN} channel variable… Affected: 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.1; +34 more |
| CVE-2009-4055 | – | Dec 2 | rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x… Affected: 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.1; +34 more |
| CVE-2009-3727 | – | Nov 10 | Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before… Affected: 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.0; 1.2.1; +34 more |
| CVE-2009-2726 | – | Aug 12 | The SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, 1.4.x before 1.4.26.1, 1.6.0.x before 1.6.0.12, and 1.6.1.x before 1.6.1.4; Asterisk Business Edition A.x.x,… Affected: before b.2.5.9; c.2.0 through c.2.4.1; c.3.0 before c.3.1; 1.2.0 before 1.2.34; 1.4.0 before 1.4.26.1; 1.6.0 before 1.6.0.12; +1 more |
| CVE-2009-2651 | – | Jul 30 | main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote attackers to cause a denial of service (crash) via an RTP text frame without a certain delimiter, which… Affected: 1.6.1 |
| CVE-2009-0871 | – | Mar 11 | The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and 1.4.23.1; 1.6.0 before 1.6.0.6; 1.6.1 before 1.6.1.0-rc2; and Asterisk Business Edition C.2.3, with the pedantic… Affected: 1.4.22; 1.4.23; 1.4.23.1; 1.6.0; 1.6.0; 1.6.0; +24 more |