AS
Product
Asterisk
114
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 24Medium 20Low 0
Watch
Add Asterisk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-6171 | – | Nov 30 | SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 allows remote attackers to execute… Affected: 1.4.0 before 1.4.15; c.1.0; c.1.0; c.1.0; c.1.0; c.1.0 |
| CVE-2007-6170 | – | Nov 30 | SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2.25, B.x before B.2.3.4, and C.x before… Affected: 1.2.0 before 1.2.25; 1.4.0 before 1.4.15; b.2.3.0 before b.2.3.4; c.1.0; c.1.0; c.1.0; +2 more |
| CVE-2007-5358 | – | Oct 12 | Multiple buffer overflows in the voicemail functionality in Asterisk 1.4.x before 1.4.13, when using IMAP storage, might allow (1) remote attackers to execute arbitrary code via a… Affected: through 1.4.12 |
| CVE-2007-1306 | – | Mar 7 | Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation Protocol (SIP) packet without a URI… Affected: 1.2.0_beta1; 1.2.0_beta2; 1.2.6; 1.2.7; 1.2.8; 1.2.9; +12 more |
| CVE-2006-5445 | – | Oct 23 | Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3 allows remote attackers to cause a denial of… Affected: 1.2.0_beta1; 1.2.0_beta2; 1.2.6; 1.2.7; 1.2.8; 1.2.9; +7 more |
| CVE-2006-5444 | – | Oct 23 | Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2.13, as used by Cisco SCCP phones,… Affected: 0.1.7; 0.1.8; 0.1.9; 0.1.9.1; 0.2; 0.3; +20 more |
| CVE-2006-4346 | – | Aug 24 | Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which allows remote attackers to (1) execute code via format string… Affected: 1.2.10 |
| CVE-2006-4345 | – | Aug 24 | Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to execute arbitrary code via a crafted audit endpoint (AUEP)… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +14 more |
| CVE-2006-2898 | – | Jun 7 | The IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11 allows remote attackers to cause a denial of service (crash) and execute arbitrary code… Affected: 1.0.7; 1.0.8; 1.0.9; 1.0.10; 1.2.0_beta1; 1.2.0_beta2; +3 more |
| CVE-2006-1827 | – | Apr 18 | Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a… Affected: through 1.2.6; 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; +32 more |
| CVE-2005-3559 | – | Nov 16 | Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a Affected: 0.1.0; 0.1.1; 0.1.2; 0.1.3; 0.1.4; 0.1.5; +27 more |
| CVE-2005-2081 | – | Jul 5 | Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code… Affected: 1.0.7 |
| CVE-2003-0779 | – | Sep 22 | SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers to execute arbitrary SQL via a CallerID string Affected: 0.1.7; 0.1.8; 0.1.9; 0.1.9.1; 0.2; 0.3; +1 more |
| CVE-2003-0761 | – | Sep 17 | Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for Asterisk releases before August 15, 2003, allows remote… Affected: 1.2.13 |