agentprime: asteriskEvery new CVE for asterisk.https://agentprime.io/CVE-2026-57199: Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffershttps://agentprime.io/advisories/CVE-2026-57199/https://agentprime.io/advisories/CVE-2026-57199/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:52:42 GMTCVECVE-2026-57203: Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper locationhttps://agentprime.io/advisories/CVE-2026-57203/https://agentprime.io/advisories/CVE-2026-57203/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:48:40 GMTCVECVE-2026-57190: Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Fieldhttps://agentprime.io/advisories/CVE-2026-57190/https://agentprime.io/advisories/CVE-2026-57190/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:45:50 GMTCVECVE-2026-57191: Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsinghttps://agentprime.io/advisories/CVE-2026-57191/https://agentprime.io/advisories/CVE-2026-57191/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:32:23 GMTCVECVE-2026-57192: Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatchhttps://agentprime.io/advisories/CVE-2026-57192/https://agentprime.io/advisories/CVE-2026-57192/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:25:40 GMTCVECVE-2026-57186: Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parserhttps://agentprime.io/advisories/CVE-2026-57186/https://agentprime.io/advisories/CVE-2026-57186/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:21:55 GMTCVECVE-2026-57200: Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCEhttps://agentprime.io/advisories/CVE-2026-57200/https://agentprime.io/advisories/CVE-2026-57200/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:13:03 GMTCVECVE-2026-57195: Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authenticationhttps://agentprime.io/advisories/CVE-2026-57195/https://agentprime.io/advisories/CVE-2026-57195/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 21:04:25 GMTCVECVE-2026-57202: Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writeshttps://agentprime.io/advisories/CVE-2026-57202/https://agentprime.io/advisories/CVE-2026-57202/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:58:46 GMTCVECVE-2026-57188: Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handlinghttps://agentprime.io/advisories/CVE-2026-57188/https://agentprime.io/advisories/CVE-2026-57188/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 17:55:29 GMTCVECVE-2026-57189: Asterisk: Possible RED T.140 Generation Accumulation OOB Writehttps://agentprime.io/advisories/CVE-2026-57189/https://agentprime.io/advisories/CVE-2026-57189/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:59:46 GMTCVECVE-2026-57201: Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Bufferhttps://agentprime.io/advisories/CVE-2026-57201/https://agentprime.io/advisories/CVE-2026-57201/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:56:37 GMTCVECVE-2026-57194: Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asteriskhttps://agentprime.io/advisories/CVE-2026-57194/https://agentprime.io/advisories/CVE-2026-57194/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:52:47 GMTCVECVE-2026-57198: Asterisk: Possible RED T.140 Heap Buffer Overflowhttps://agentprime.io/advisories/CVE-2026-57198/https://agentprime.io/advisories/CVE-2026-57198/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:47:20 GMTCVECVE-2026-57185: Asterisk: Buffer over-read in Asterisk PJSIP MWI body parserhttps://agentprime.io/advisories/CVE-2026-57185/https://agentprime.io/advisories/CVE-2026-57185/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:40:27 GMTCVECVE-2026-57197: Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)https://agentprime.io/advisories/CVE-2026-57197/https://agentprime.io/advisories/CVE-2026-57197/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 16:35:59 GMTCVECVE-2026-57184: Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)https://agentprime.io/advisories/CVE-2026-57184/https://agentprime.io/advisories/CVE-2026-57184/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 19:53:10 GMTCVECVE-2026-57193: Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)https://agentprime.io/advisories/CVE-2026-57193/https://agentprime.io/advisories/CVE-2026-57193/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 19:46:01 GMTCVECVE-2026-57187: Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processinghttps://agentprime.io/advisories/CVE-2026-57187/https://agentprime.io/advisories/CVE-2026-57187/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 19:31:52 GMTCVECVE-2026-57196: Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pageshttps://agentprime.io/advisories/CVE-2026-57196/https://agentprime.io/advisories/CVE-2026-57196/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 19:27:35 GMTCVECVE-2026-23741: ast_coredumper running as root sources ast_debug_tools.conf from /etc/asterisk; potentially leading to privilege escalationhttps://agentprime.io/advisories/CVE-2026-23741/https://agentprime.io/advisories/CVE-2026-23741/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Feb 2026 16:47:19 GMTCVECVE-2026-23740: Asterisk vulnerable to potential privilege escalationhttps://agentprime.io/advisories/CVE-2026-23740/https://agentprime.io/advisories/CVE-2026-23740/CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Feb 2026 16:43:41 GMTCVECVE-2026-23739: Asterisk xml.c uses unsafe XML_PARSE_NOENT leading to potential XXE Injectionhttps://agentprime.io/advisories/CVE-2026-23739/https://agentprime.io/advisories/CVE-2026-23739/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Feb 2026 16:42:25 GMTCVECVE-2026-23738: The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitizationhttps://agentprime.io/advisories/CVE-2026-23738/https://agentprime.io/advisories/CVE-2026-23738/CVSS 3.5 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Feb 2026 16:41:43 GMTCVECVE-2025-1131: Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalationhttps://agentprime.io/advisories/CVE-2025-1131/https://agentprime.io/advisories/CVE-2025-1131/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Sep 2025 04:31:02 GMTCVECVE-2025-57767: Asterisk can crash from a specifically malformed Authorization header in an incoming SIP requesthttps://agentprime.io/advisories/CVE-2025-57767/https://agentprime.io/advisories/CVE-2025-57767/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Aug 2025 15:33:00 GMTCVECVE-2025-54995: Asterisk remotely exploitable leak of RTP UDP ports and internal resourceshttps://agentprime.io/advisories/CVE-2025-54995/https://agentprime.io/advisories/CVE-2025-54995/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 28 Aug 2025 15:08:04 GMTCVECVE-2025-49832: Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocationhttps://agentprime.io/advisories/CVE-2025-49832/https://agentprime.io/advisories/CVE-2025-49832/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 01 Aug 2025 17:57:29 GMTCVECVE-2025-47780: cli_permissions.conf: deny option does not work for disallowing shell commandshttps://agentprime.io/advisories/CVE-2025-47780/https://agentprime.io/advisories/CVE-2025-47780/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 May 2025 16:56:28 GMTCVECVE-2025-47779: Using malformed From header can forge identity with ";" or NULL in name portionhttps://agentprime.io/advisories/CVE-2025-47779/https://agentprime.io/advisories/CVE-2025-47779/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 May 2025 16:54:26 GMTCVECVE-2024-42491: A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is usedhttps://agentprime.io/advisories/CVE-2024-42491/https://agentprime.io/advisories/CVE-2024-42491/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Sep 2024 17:17:56 GMTCVECVE-2024-42365: Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplanhttps://agentprime.io/advisories/CVE-2024-42365/https://agentprime.io/advisories/CVE-2024-42365/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Aug 2024 16:29:07 GMTCVECVE-2024-35190: Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requestshttps://agentprime.io/advisories/CVE-2024-35190/https://agentprime.io/advisories/CVE-2024-35190/CVSS 5.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 May 2024 16:55:41 GMTCVECVE-2023-49786: Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiationhttps://agentprime.io/advisories/CVE-2023-49786/https://agentprime.io/advisories/CVE-2023-49786/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 19:47:46 GMTCVECVE-2023-37457: Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'https://agentprime.io/advisories/CVE-2023-37457/https://agentprime.io/advisories/CVE-2023-37457/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 19:43:30 GMTCVECVE-2023-49294: Asterisk Path Traversal vulnerabilityhttps://agentprime.io/advisories/CVE-2023-49294/https://agentprime.io/advisories/CVE-2023-49294/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 Dec 2023 19:40:46 GMTCVECVE-2009-3723: asterisk allows calls on prohibited networkshttps://agentprime.io/advisories/CVE-2009-3723/https://agentprime.io/advisories/CVE-2009-3723/Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Oct 2019 12:42:08 GMTCVE