Skip to content
OpenAdvisories
Unscored DSA-1358-1 8 CVEs

asterisk

Published Aug 26, 2007 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 3.1 asterisk 1:1.0.7.dfsg.1-2sarge5
Debian · 4.0 asterisk 1:1.2.13~dfsg-2etch1

Vulnerabilities 8

  • Unscored —
    CVE-2007-1306 Public exploit EPSS 21%

    Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending…

  • Unscored —
    CVE-2007-1561 Public exploit EPSS 15%

    The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of servic…

  • Unscored —

    The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of ser…

  • Unscored —

    The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP pack…

  • Unscored —

    The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows rem…

  • Unscored —

    Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Bu…

  • Unscored —
    CVE-2007-3763 Public exploit EPSS 27%

    The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, …

  • Unscored —
    CVE-2007-3764 Public exploit EPSS 32%

    The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2…