Login Request a demo
CA
Product
Certified Asterisk
by Digium · last CVE Apr 15, 2022
51
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities51In the news0Timeline
Severity mix
Critical 2High 16Medium 13Low 0
Severity
All severities51Critical2High16Medium13Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Certified Asterisk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-18610
8.8
50%
Nov 22
An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4
Affected: 13.21.0; 13.21.0; 13.21.0; 13.21.0; 13.21.0; 13.21.0
CVE-2017-16671
8.8
4%
Nov 9
A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7
Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +5 more
CVE-2017-7617
8.8
8%
Apr 10
Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in…
Affected: through 13.13-cert2
CVE-2021-32558
7.5
9%
Jul 30
An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10
Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +11 more
CVE-2021-26712
7.5
4%
Feb 18
Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to…
Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +7 more
CVE-2021-26717
7.5
2%
Feb 18
An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6
Affected: 16.8; 16.8; 16.8; 16.8; 16.8; 16.8; +7 more
CVE-2019-18976
7.5
13%
Nov 22
An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x
Affected: 13.21; 13.21; 13.21; 13.21; 13.21
CVE-2018-17281
7.5
52%
Sep 24
There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x through 15.6.0 and Certified Asterisk…
Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +22 more
CVE-2018-7284
7.5
66%
Feb 22
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2
Affected: 13.18; 13.18; through 13.18
CVE-2017-17850
7.5
75%
Dec 27
An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older
Affected: 13.1.0; 13.1.0; 13.1.0; 13.8
CVE-2017-17090
7.5
82%
Dec 2
An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asterisk 13.13-cert7 and older
Affected: through 13.13; 13.13; 13.13; 13.13; 13.13; 13.13; +6 more
CVE-2017-14603
7.5
3%
Oct 10
In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet…
Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +22 more
CVE-2017-14099
7.5
4%
Sep 2
In res/res_rtp_asterisk.c in Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5,…
Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +22 more
CVE-2017-9372
7.5
4%
Jun 2
PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to…
Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +4 more
CVE-2017-9359
7.5
4%
Jun 2
The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products,…
Affected: 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; 13.13.0; +4 more
CVE-2016-7551
7.5
5%
Apr 17
chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13.x 13.11.1 and Certified Asterisk 11.6 before 11.6-cert15 and 13.8 before 13.8-cert3 allows remote attackers to cause a…
Affected: 11.6; 11.6; 11.6; 11.6; 11.6; 11.6; +25 more
Showing 16