Skip to content
OpenAdvisories

Package · Debian

asterisk

229 known vulnerabilities.

229 results · Feed

  • Unscored —

    Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x b…

  • Unscored —

    SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk 1.4.x before 1.4.…

  • Unscored —

    SQL injection vulnerability in the Postgres Realtime Engine (res_config_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x …

  • Unscored —

    Multiple buffer overflows in the voicemail functionality in Asterisk 1.4.x before 1.4.13, when using IMAP storage, migh…

  • Unscored —

    The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appli…

  • Unscored —

    The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Deve…

  • Unscored —

    The IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance De…

  • Unscored —
    CVE-2007-3764 Public exploit EPSS 32%

    The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2…

  • Unscored —
    CVE-2007-3763 Public exploit EPSS 27%

    The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, …

  • Unscored —

    The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0,…

  • Unscored —

    Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Bu…

  • Unscored —

    The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows rem…

  • Unscored —

    The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without a…

  • Unscored —

    The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP pack…

  • Unscored —
    CVE-2007-2293 Public exploit EPSS 24%

    Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in A…

  • Unscored —

    The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of ser…

  • Unscored —

    The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows …

  • Unscored —
    CVE-2007-1561 Public exploit EPSS 15%

    The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2007-1306 Public exploit EPSS 21%

    Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending…

  • Unscored —

    Unspecified vulnerability in the SIP channel driver (channels/chan_sip.c) in Asterisk 1.2.x before 1.2.13 and 1.4.x bef…

  • Unscored —
    CVE-2006-5444 Public exploit EPSS 86%

    Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12…

  • Unscored —

    Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in Asterisk 1.0 through 1.2.10 allows remote attackers to e…

  • Unscored —

    Asterisk 1.2.10 supports the use of client-controlled variables to determine filenames in the Record function, which al…

  • Unscored —

    The IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11 allows remote attackers to …

  • Unscored —

    Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2005-3559 Public exploit EPSS 20%

    Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access …

  • Unscored —

    Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option i…

  • Unscored —

    Buffer overflow in the get_msg_text of chan_sip.c in the Session Initiation Protocol (SIP) protocol implementation for …

  • Unscored —

    SQL injection vulnerability in the Call Detail Record (CDR) logging functionality for Asterisk allows remote attackers …