Skip to content
OpenAdvisories

Package · Debian

asterisk

229 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.4
    CVE-2026-32945 Public exploit

    PJSIP is vulnerable to Heap-based Buffer Overflow through DNS parser

    PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a Heap-based Buffer Overflowvulnerability in the DNS parser's name length handler. Thisimpacts applications using PJSIP's built-in DNS resolver, such a…

    pjsip pjproject asterisk pjproject Debian Ubuntu Alpine
  • High 8.1
    CVE-2026-25994 Public exploit

    PJSIP has a heap buffer overflow in ICE with long username

    PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, a buffer overflow vulnerability exists in PJNATH ICE Session when processing credentials with excessively long usernames.

    pjsip pjproject asterisk pjproject Debian Ubuntu Alpine
  • High 7.4
    CVE-2024-42365 Public exploit

    Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan

    Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with `write=originate` may change all configuration …

    asterisk asterisk asterisk asterisk Debian Ubuntu Alpine