Medium WID-SEC-2022-2218 3 CVEs

Asterisk: Mehrere Schwachstellen

Published Dec 1, 2022 · Updated Oct 27, 2026 · Revision 5 · de-DE

Vendor: Debian Vendor: Digium Vendor: Fedora Vendor: gentoo Product: Certified Asterisk Product: Linux Product: Linux Product: Linux Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

Product

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

Vulnerabilities 3

High 7.5

CVE-2022-37325

In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message …

asterisk asterisk asterisk Debian Ubuntu Alpine

Dec 5, 2022
Medium 6.5

CVE-2022-42705

A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a rem…

asterisk asterisk asterisk Debian Ubuntu Alpine

Dec 5, 2022
Medium 4.9

CVE-2022-42706

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified thro…

asterisk asterisk asterisk Debian Ubuntu Alpine

Dec 5, 2022

Revision history

2026-10-27 #5
Referenz(en) aufgenommen: EUVD-2026-111395
2026-04-12 #4
Neue Updates von Fedora aufgenommen
2024-12-08 #3
Neue Updates von Gentoo aufgenommen
2023-02-22 #2
Neue Updates von Debian aufgenommen
2022-12-01 #1
Initiale Fassung

References

Asterisk Security Advisory AST-2022-007 vom 2022-12-01
https://downloads.asterisk.org/pub/security/AST-2022-007.html
Asterisk Security Advisory AST-2022-008 vom 2022-12-01
https://downloads.asterisk.org/pub/security/AST-2022-008.html
Asterisk Security Advisory AST-2022-009 vom 2022-12-01
https://downloads.asterisk.org/pub/security/AST-2022-009.html
Debian Security Advisory DLA-3335 vom 2023-02-23
https://lists.debian.org/debian-lts-announce/2023/02/msg00029.html
Debian Security Advisory DSA-5358 vom 2023-02-23
https://lists.debian.org/debian-security-announce/2023/msg00047.html
Gentoo Linux Security Advisory GLSA-202412-03 vom 2024-12-07
https://security.gentoo.org/glsa/202412-03
Fedora Security Advisory FEDORA-EPEL-2026-F2281ACB03 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-f2281acb03
Fedora Security Advisory FEDORA-2026-98DECBDE87 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-98decbde87
Fedora Security Advisory FEDORA-EPEL-2026-D5CC2324A0 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-d5cc2324a0
Fedora Security Advisory FEDORA-2026-38D71393C1 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-38d71393c1
Fedora Security Advisory FEDORA-2026-80B21DEBE7 vom 2026-04-12
https://bodhi.fedoraproject.org/updates/FEDORA-2026-80b21debe7