High WID-SEC-2022-2107 3 CVEs

Asterisk: Mehrere Schwachstellen

Published Apr 18, 2022 · Updated Apr 12, 2026 · Revision 4 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Product: Linux Product: Linux Product: Linux Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder eine SQL-Injektion durchzuführen.

Product

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

Vulnerabilities 3

Unscored —

CVE-2022-26498 EPSS 17%

An issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it is possible to download files that are not…

asterisk asterisk asterisk Debian Ubuntu Alpine

Apr 15, 2022
Unscored —

CVE-2022-26499

An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests…

asterisk asterisk asterisk Debian Ubuntu Alpine

Apr 15, 2022
Unscored —

CVE-2022-26651

An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc module provi…

asterisk asterisk asterisk Debian Ubuntu Alpine

Apr 15, 2022

Revision history

2026-04-12 #4
Neue Updates von Fedora aufgenommen
2024-12-08 #3
Neue Updates von Gentoo aufgenommen
2022-11-17 #2
Neue Updates von Debian aufgenommen
2022-04-18 #1
Initiale Fassung

References

Asterisk Project Security Advisory vom 2022-04-14
https://downloads.asterisk.org/pub/security/AST-2022-001.html
Asterisk Project Security Advisory vom 2022-04-14
https://downloads.asterisk.org/pub/security/AST-2022-002.html
Asterisk Project Security Advisory vom 2022-04-14
https://downloads.asterisk.org/pub/security/AST-2022-003.html
Debian Security Advisory DSA-5285 vom 2022-11-17
https://lists.debian.org/debian-security-announce/2022/msg00256.html
Debian Security Advisory DLA-3194 vom 2022-11-17
https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html
Gentoo Linux Security Advisory GLSA-202412-03 vom 2024-12-07
https://security.gentoo.org/glsa/202412-03
Fedora Security Advisory FEDORA-2026-38D71393C1 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-38d71393c1
Fedora Security Advisory FEDORA-EPEL-2026-D5CC2324A0 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d5cc2324a0
Fedora Security Advisory FEDORA-EPEL-2026-F2281ACB03 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f2281acb03
Fedora Security Advisory FEDORA-2026-98DECBDE87 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-98decbde87
Fedora Security Advisory FEDORA-2026-80B21DEBE7 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-80b21debe7