AS
Product
Asterisk
114
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 24Medium 20Low 0
Watch
Add Asterisk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-18610 | 8.8 | Nov 22 | An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4 Affected: 13.0.0 before 13.29.2; 16.0.0 before 16.6.2; 17.0.0 before 17.0.1 |
| CVE-2017-16671 | 8.8 | Nov 9 | A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7 Affected: 13.0.0 before 13.18.1; 14.0.0 before 14.7.1; 15.0.0 before 15.1.1 |
| CVE-2017-7617 | 8.8 | Apr 10 | Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in… Affected: 13.0.0; 13.0.0; 13.0.0; 13.0.0; 13.0.1; 13.0.2; +34 more |
| CVE-2023-37457 | 8.2 | Dec 14 | Asterisk is an open source private branch exchange and telephony toolkit Affected: through 18.20.0; 19.0.0 through 20.5.0; 21.0.0 |
| CVE-2023-49294 | 7.5 | Dec 14 | Asterisk is an open source private branch exchange and telephony toolkit Affected: before 18.20.1; 19.0.0 before 20.5.1; 21.0.0 |
| CVE-2022-26498 | 7.5 | Apr 15 | An issue was discovered in Asterisk through 19.x Affected: 16.15.0 through 16.25.1; 18.0 before 18.11.2; 19.0.0 through 19.3.1 |
| CVE-2021-32558 | 7.5 | Jul 30 | An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10 Affected: 13.0.0 before 13.38.3; 16.0.0 before 16.19.1; 17.0.0 before 17.9.4; 18.0.0 before 18.15.1 |
| CVE-2021-26712 | 7.5 | Feb 18 | Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to… Affected: 13.0.0 through 13.38.2; 16.0.0 before 16.16.1; 17.0.0 before 17.9.2; 18.0 before 18.2.1 |
| CVE-2021-26717 | 7.5 | Feb 18 | An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 Affected: 16.0.0 before 16.16.1; 17.0.0 before 17.9.2; 18.0 before 18.2.1 |
| CVE-2019-18976 | 7.5 | Nov 22 | An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x Affected: 13.0.0 through 13.29.1 |
| CVE-2019-15639 | 7.5 | Sep 9 | main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a crash in a specific scenario Affected: 13.0.0 through 13.28.0; 16.0.0 through 16.5.0 |
| CVE-2016-7550 | 7.5 | May 23 | asterisk 13.10.0 is affected by: denial of service issues in asterisk Affected: 13.10.0 |
| CVE-2018-19278 | 7.5 | Nov 14 | Buffer overflow in DNS SRV and NAPTR lookups in Digium Asterisk 15.x before 15.6.2 and 16.x before 16.0.1 allows remote attackers to crash Asterisk via a specially crafted DNS SRV… Affected: 15.0.0; 15.0.0; 15.0.0; 15.1.0; 15.1.0; 15.1.0; +24 more |
| CVE-2018-17281 | 7.5 | Sep 24 | There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk… Affected: 13.0.0 through 13.23.0; 14.0.0 through 14.7.7; 15.0.0 through 15.6.0 |
| CVE-2018-7285 | 7.5 | Feb 22 | A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1 Affected: 15.0.0 through 15.2.1 |
| CVE-2018-7284 | 7.5 | Feb 22 | A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2 Affected: through 13.19.1; 14.0.0 through 14.7.5; 15.0.0 through 15.2.1 |
| CVE-2017-17850 | 7.5 | Dec 27 | An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older Affected: 13.0.0 through 13.18.4; 14.0.0 through 14.7.4; 15.0.0 through 15.1.4 |
| CVE-2017-17090 | 7.5 | Dec 2 | An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older Affected: through 13.8.2; through 14.7.2; through 15.1.2 |
| CVE-2017-14603 | 7.5 | Oct 10 | In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet… Affected: 13.0.0; 13.0.0; 13.0.0; 13.0.0; 13.0.1; 13.0.2; +34 more |
| CVE-2017-14099 | 7.5 | Sep 2 | In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5,… Affected: 13.0.0; 13.0.0; 13.0.0; 13.0.0; 13.0.1; 13.0.2; +34 more |
| CVE-2017-14098 | 7.5 | Sep 2 | In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, or Contact header could cause Asterisk… Affected: 13.0.0; 13.0.0; 13.0.0; 13.0.0; 13.0.1; 13.0.2; +34 more |
| CVE-2016-7551 | 7.5 | Apr 17 | chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a… Affected: 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.1; +34 more |
| CVE-2016-9937 | 7.5 | Dec 12 | An issue was discovered in Asterisk Open Source 13.12.x and 13.13.x before 13.13.1 and 14.x before 14.2.1 Affected: 13.12; 13.13; 14.0; 14.1; 14.01; 14.1.1; +3 more |
| CVE-2007-4103 | 7.5 | Jul 31 | The IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow… Affected: 1.2.20 before 1.2.23; 1.4.0 before 1.4.9 |
Showing 24