Unscored DLA-455-1 6 CVEs

asterisk - security update

Published May 3, 2016 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	asterisk	1:1.8.13.1~dfsg1-3+deb7u4

Vulnerabilities 6

Unscored —

CVE-2014-2286 EPSS 16%

main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certifie…

asterisk Debian

Apr 18, 2014
Unscored —

CVE-2014-4046

Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1 and Certified Asterisk 11.6 before 11.6-cert3 allows re…

asterisk Debian

Jun 17, 2014
Unscored —

CVE-2014-6610

Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when usi…

asterisk Debian

Nov 26, 2014
Unscored —

CVE-2014-8412

The (1) VoIP channel drivers, (2) DUNDi, and (3) Asterisk Manager Interface (AMI) in Asterisk Open Source 1.8.x before …

asterisk Debian

Nov 24, 2014
Unscored —

CVE-2014-8418

The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.…

asterisk Debian

Nov 24, 2014
Unscored —

CVE-2015-3008 EPSS 46%

Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified…

asterisk asterisk Debian Ubuntu

Apr 10, 2015