Asterisk / Open Source
22 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2013-2686 | main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8… | MEDIUM | 5.0 | Mar 29, 2013 |
| CVE-2013-2685 | Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a lo… | HIGH | 7.5 | Mar 29, 2013 |
| CVE-2013-2264 | The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert… | MEDIUM | 5.0 | Mar 29, 2013 |
| CVE-2012-2186 | Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8… | HIGH | 9.0 | Aug 31, 2012 |
| CVE-2012-2948 | chan_skinny.c in the Skinny (aka SCCP) channel driver in Certified Asterisk 1.8.11-cert before 1.8.11-cert2 and Asterisk Open Source 1.8.x before 1.8.12.1 and… | MEDIUM | 4.0 | Jun 2, 2012 |
| CVE-2012-2416 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, w… | MEDIUM | 6.5 | Apr 30, 2012 |
| CVE-2012-2415 | Heap-based buffer overflow in chan_skinny.c in the Skinny channel driver in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x befor… | MEDIUM | 6.5 | Apr 30, 2012 |
| CVE-2012-2414 | main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Ed… | MEDIUM | 6.5 | Apr 30, 2012 |
| CVE-2012-0885 | chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the res_srtp module is used and media support is improperly configured, al… | MEDIUM | 4.3 | Jan 25, 2012 |
| CVE-2011-4063 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during requ… | MEDIUM | 6.8 | Oct 21, 2011 |
| CVE-2009-2346 | asterisk: IAX2 DoS vulnerability (AST-2009-006) | HIGH | 7.8 | Sep 8, 2009 |
| CVE-2009-0041 | asterisk: Replies to failed login attempts differently based on whether the user account exists (information disclosure) | MEDIUM | 5.0 | Jan 14, 2009 |
| CVE-2008-5558 | Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cau… | MEDIUM | 4.3 | Dec 17, 2008 |
| CVE-2008-3264 | The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x befor… | HIGH | 7.8 | Jul 24, 2008 |
| CVE-2008-2119 | Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enab… | MEDIUM | 4.3 | Jun 4, 2008 |
| CVE-2008-1923 | The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends… | HIGH | 7.1 | Apr 23, 2008 |
| CVE-2008-1897 | asterisk: 3-way handshake in IAX2 incomplete (CVE-2008-1923) | MEDIUM | 4.3 | Apr 23, 2008 |
| CVE-2008-1289 | asterisk: Two buffer overflows in RTP Codec Payload Handling (AST-2008-002) | HIGH | 7.5 | Mar 24, 2008 |
| CVE-2008-1333 | asterisk: Format String Vulnerability in Logger and Manager (AST-2008-004) | MEDIUM | 5.8 | Mar 20, 2008 |
| CVE-2008-1332 | asterisk: Unauthenticated calls allowed from SIP channel driver (AST-2008-003) | HIGH | 8.8 | Mar 20, 2008 |
| CVE-2008-0095 | The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit befo… | MEDIUM | 5.0 | Jan 8, 2008 |
| CVE-2007-6430 | Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-b… | MEDIUM | 4.3 | Dec 20, 2007 |
Showing 1 to 22 of 22 CVEs