CA
Product
Certified Asterisk
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 16Medium 13Low 0
Watch
Add Certified Asterisk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-26651 | 9.8 | Apr 15 | An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13 Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +15 more |
| CVE-2017-14100 | 9.8 | Sep 2 | In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command… Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +22 more |
| CVE-2019-18610 | 8.8 | Nov 22 | An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4 Affected: 13.21.0; 13.21.0; 13.21.0; 13.21.0; 13.21.0; 13.21.0 |
| CVE-2017-16671 | 8.8 | Nov 9 | A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7 Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +5 more |
| CVE-2017-7617 | 8.8 | Apr 10 | Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in… Affected: through 13.13-cert2 |
| CVE-2021-32558 | 7.5 | Jul 30 | An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10 Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +11 more |
| CVE-2021-26712 | 7.5 | Feb 18 | Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to… Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +7 more |
| CVE-2021-26717 | 7.5 | Feb 18 | An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +7 more |
| CVE-2019-18976 | 7.5 | Nov 22 | An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x Affected: 13.21; 13.21; 13.21; 13.21; 13.21 |
| CVE-2018-17281 | 7.5 | Sep 24 | There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk… Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +22 more |
| CVE-2018-7284 | 7.5 | Feb 22 | A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2 Affected: 13.18; 13.18; through 13.18 |
| CVE-2017-17850 | 7.5 | Dec 27 | An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older Affected: 13.1.0; 13.1.0; 13.1.0; 13.8 |
| CVE-2017-17090 | 7.5 | Dec 2 | An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older Affected: through 13.13; 13.13; 13.13; 13.13; 13.13; 13.13; +6 more |
| CVE-2017-14603 | 7.5 | Oct 10 | In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet… Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +22 more |
| CVE-2017-14099 | 7.5 | Sep 2 | In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5,… Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +22 more |
| CVE-2017-9372 | 7.5 | Jun 2 | PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to… Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +4 more |
| CVE-2017-9359 | 7.5 | Jun 2 | The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products,… Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +4 more |
| CVE-2016-7551 | 7.5 | Apr 17 | chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a… Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +25 more |
| CVE-2021-26713 | 6.5 | Feb 19 | A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 allows… Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +7 more |
| CVE-2019-18790 | 6.5 | Nov 22 | An issue was discovered in channels/chan_sip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5 Affected: 13.21.0; 13.21.0; 13.21.0; 13.21.0; 13.21.0; 13.21.0 |
| CVE-2019-12827 | 6.5 | Jul 12 | Buffer overflow in res_pjsip_messaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending… Affected: 13.21; 13.21; 13.21; 13.21; 13.21 |
| CVE-2018-7286 | 6.5 | Feb 22 | An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2 Affected: through 13.18 |
| CVE-2016-2232 | 6.5 | Feb 22 | Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3 allow remote… Affected: 1.8.28; 11.6; 11.6; 11.6; 11.6; 11.6; +20 more |
| CVE-2021-26906 | 5.9 | Feb 18 | An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and… Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +7 more |
| CVE-2017-17664 | 5.9 | Dec 13 | A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asterisk before 13.13-cert9 Affected: through 13.13; 13.13; 13.13; 13.13; 13.13; 13.13; +7 more |
| CVE-2017-16672 | 5.9 | Nov 9 | An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7 Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +5 more |
| CVE-2016-2316 | 5.9 | Feb 22 | chan_sip in Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1 and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3, when… Affected: 1.8.28; 11.6; 11.6; 11.6; 11.6; 11.6; +20 more |
| CVE-2020-28327 | 5.3 | Nov 6 | A res_pjsip_session crash was discovered in Asterisk Open Source 13.x before 13.37.1, 16.x before 16.14.1, 17.x before 17.8.1, and 18.x before 18.0.1 Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +6 more |
| CVE-2019-13161 | 5.3 | Jul 12 | An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3 Affected: 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; +34 more |
| CVE-2018-12227 | 5.3 | Jun 12 | An issue was discovered in Asterisk Open Source 13.x before 13.21.1, 14.x before 14.7.7, and 15.x before 15.4.1 and Certified Asterisk 13.18-cert before 13.18-cert4 and 13.21-cert… Affected: 13.18; 13.18; 13.18; 13.21 |
| CVE-2016-9938 | 5.3 | Dec 12 | An issue was discovered in Asterisk Open Source 11.x before 11.25.1, 13.x before 13.13.1, and 14.x before 14.2.1 and Certified Asterisk 11.x before 11.6-cert16 and 13.x before… Affected: 11.0.0; 11.0.0; 11.0.0; 11.1.0; 11.1.0; 11.1.0; +34 more |
| CVE-2015-3008 | – | Apr 10 | Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified Asterisk 1.8.28 before 1.8.28-cert5, 11.6 before… Affected: 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; +34 more |
| CVE-2014-9374 | – | Dec 12 | Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open Source 11.x before 11.14.2, 12.x before 12.7.2, and 13.x before 13.0.2 and Certified… Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +3 more |
| CVE-2014-6610 | – | Nov 26 | Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the res_fax_spandsp module, allows remote authenticated… Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6.0 |
| CVE-2014-8418 | – | Nov 24 | The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 1.8 before… Affected: 1.8.28; 1.8.28; 1.8.28; 1.8.28; 1.8.28; 1.8.28; +10 more |
| CVE-2014-8417 | – | Nov 24 | ConfBridge in Asterisk 11.x before 11.14.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Certified Asterisk 11.6 before 11.6-cert8 allows remote authenticated users to (1) gain… Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +2 more |
| CVE-2014-8414 | – | Nov 24 | ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes, which allows remote attackers to cause a denial of… Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +2 more |
| CVE-2014-8412 | – | Nov 24 | The (1) VoIP channel drivers, (2) DUNDi, and (3) Asterisk Manager Interface (AMI) in Asterisk Open Source 1.8.x before 1.8.32.1, 11.x before 11.14.1, 12.x before 12.7.1, and 13.x… Affected: 1.8.28; 1.8.28; 1.8.28.0; 11.6; 11.6; 11.6; +5 more |
| CVE-2014-4047 | – | Jun 17 | Asterisk Open Source 1.8.x before 1.8.28.1, 11.x before 11.10.1, and 12.x before 12.3.1 and Certified Asterisk 1.8.15 before 1.8.15-cert6 and 11.6 before 11.6-cert3 allows remote… Affected: 1.8.15; 1.8.15; 1.8.15; 1.8.15; 1.8.15; 1.8.15; +10 more |
| CVE-2014-4046 | – | Jun 17 | Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows remote authenticated Manager users to execute arbitrary shell… Affected: 11.6; 11.6; 11.6; 11.6; 11.6.0; 11.6.0; +1 more |
| CVE-2014-2287 | – | Apr 18 | channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6… Affected: 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; +34 more |
| CVE-2014-2286 | – | Apr 18 | main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x before 1.8.15-cert5 and 11.6 before… Affected: 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; 1.8.0.0; +34 more |
| CVE-2013-7100 | – | Dec 19 | Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with… Affected: 1.8.15; 1.8.15; 1.8.15; 1.8.15; 1.8.15; 1.8.15; +5 more |
| CVE-2013-5642 | – | Sep 9 | The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.x before 1.8.23.1, 10.x before 10.12.3, and 11.x before 11.5.1; Certified Asterisk 1.8.15 before… Affected: 1.8.15; 1.8.15; 1.8.15; 1.8.15; 1.8.15; 1.8.15; +5 more |
| CVE-2013-5641 | – | Sep 9 | The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1, and 11.x before 11.5.1 and Certified Asterisk 1.8.15… Affected: 1.8.15; 1.8.15; 1.8.15; 1.8.15; 1.8.15; 1.8.15; +5 more |
| CVE-2012-5977 | – | Jan 4 | Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones… Affected: 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11; +4 more |
| CVE-2012-5976 | – | Jan 4 | Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before… Affected: 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11; +4 more |
| CVE-2012-4737 | – | Aug 31 | channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones… Affected: 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11; +1 more |
| CVE-2012-3812 | – | Jul 9 | Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and… Affected: 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11 |
| CVE-2012-3863 | – | Jul 9 | channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before… Affected: 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11; 1.8.11 |