AS
Product
Asterisk
114
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 24Medium 20Low 0
Watch
Add Asterisk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-46837 | 6.5 | Aug 30 | res_pjsip_t38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash… Affected: 16.0.0 before 16.16.2; 17.0.0 before 17.9.3; 18.0.0 before 18.2.2 |
| CVE-2021-31878 | 6.5 | Jul 30 | An issue was discovered in PJSIP in Asterisk before 16.19.1 and before 18.5.1 Affected: 16.17.0; 16.18.0; 16.19.0; 18.3.0; 18.4.0; 18.5.0 |
| CVE-2021-26713 | 6.5 | Feb 19 | A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 allows… Affected: 16.0.0 before 16.16.1; 17.0.0 before 17.9.2; 18.0.0 before 18.2.1 |
| CVE-2020-35776 | 6.5 | Feb 18 | A buffer overflow in res_pjsip_diversion.c in Sangoma Asterisk versions 13.38.1, 16.15.1, 17.9.1, and 18.1.1 allows remote attacker to crash Asterisk by deliberately misusing SIP… Affected: 13.0.0 through 13.38.1; 16.0.0 through 16.15.1; 17.0.0 through 17.9.1; 18.0 through 18.1.1 |
| CVE-2020-35652 | 6.5 | Jan 29 | An issue was discovered in res_pjsip_diversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0 Affected: before 13.38.0; 14.0 before 16.15.0; 17.0 before 17.9.0; 18.0 before 18.1.0 |
| CVE-2019-18790 | 6.5 | Nov 22 | An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5 Affected: 13.0.0 before 13.29.2; 16.0.0 before 16.6.2; 17.0.0 before 17.0.1 |
| CVE-2019-15297 | 6.5 | Sep 9 | res_pjsip_t38 in Sangoma Asterisk 15.x before 15.7.4 and 16.x before 16.5.1 allows an attacker to trigger a crash by sending a declined stream in a response to a T.38 re-invite… Affected: 15.0.0 through 15.7.3; 16.0.0 through 16.5.0 |
| CVE-2019-12827 | 6.5 | Jul 12 | Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending… Affected: 13.0.0 before 13.27.0; 15.0.0 before 15.7.2; 16.0.0 before 16.4.0 |
| CVE-2019-7251 | 6.5 | Mar 28 | An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated… Affected: 15.0.0 before 15.7.2; 16.0.0 before 16.2.1 |
| CVE-2018-7286 | 6.5 | Feb 22 | An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2 Affected: 14.0.0 through 14.7.5; 15.0.0 through 15.2.1; 13.19.1 |
| CVE-2016-2232 | 6.5 | Feb 22 | Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3 allow remote… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2023-49786 | 5.9 | Dec 14 | Asterisk is an open source private branch exchange and telephony toolkit Affected: before 18.20.1; 19.0.0 before 20.5.1; 21.0.0 |
| CVE-2021-26906 | 5.9 | Feb 18 | An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and… Affected: 13.0.0 before 13.38.2; 16.0.0 before 16.16.1; 17.0.0 before 17.9.2; 18.0 before 18.2.1 |
| CVE-2018-7287 | 5.9 | Feb 22 | An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1 Affected: 15.0.0; 15.0.0; 15.1.0; 15.1.0; 15.1.0; 15.1.1; +8 more |
| CVE-2017-17664 | 5.9 | Dec 13 | A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9 Affected: 13.0.0 before 13.18.4; 14.0.0 before 14.7.4; 15.0.0 before 15.1.4 |
| CVE-2017-16672 | 5.9 | Nov 9 | An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7 Affected: 13.0.0 before 13.18.1; 14.0.0 before 14.7.1; 15.0.0 before 15.1.1 |
| CVE-2016-2316 | 5.9 | Feb 22 | chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when… Affected: 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; 1.8.0; +34 more |
| CVE-2019-13161 | 5.3 | Jul 12 | An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3 Affected: 13.0.0 before 13.27.1; 15.0.0 before 15.7.3; 16.0.0 before 16.4.1 |
| CVE-2018-12227 | 5.3 | Jun 12 | An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Certified Asterisk 13.18-cert before 13.18-cert4 and 13.21-cert… Affected: 13.0.0 before 13.21.1; after 14.0.0 before 14.7.7; 15.0.0 before 15.4.1 |
| CVE-2016-9938 | 5.3 | Dec 12 | An issue was discovered in Asterisk Open Source 11.x before 11.25.1, 13.x before 13.13.1, and 14.x before 14.2.1 and Certified Asterisk 11.x before 11.6-cert16 and 13.x before… Affected: 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.0; 11.0.1; +34 more |
Showing 20