Skip to content
OpenAdvisories

Package · Ubuntu

asterisk

109 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-77396 Public exploit

    PJSIP: Heap buffer overflow in the AVI parser

    PJSIP is a free and open source multimedia communication library written in C. In 2.17 and earlier, the PJSIP AVI parser in pjmedia/src/pjmedia/avi_player.c uses an input-file video chunk length as the number of bytes copied into a frame buffer whose capacity…

    pjsip pjproject asterisk asterisk Debian Ubuntu
  • High 7.4
    CVE-2024-42365 Public exploit

    Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan

    Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with `write=originate` may change all configuration …

    asterisk asterisk asterisk asterisk Debian Ubuntu Alpine
  • Unscored —
    CVE-2018-7284 Public exploit EPSS 66%

    A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and C…

    asterisk asterisk Debian Ubuntu
  • Unscored —
    CVE-2018-7286 Public exploit EPSS 53%

    An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asteri…

    asterisk asterisk Debian Ubuntu
  • Unscored —
    CVE-2017-17090 Public exploit EPSS 82%

    An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and ol…

    asterisk asterisk Debian Ubuntu