Advisories · Technology
certified-asterisk.
Every CVE that names certified-asterisk among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.3 Low
Asterisk: Asterisk app_sms.c copies externally controlled SMS lengths into fixed in-struct buffers
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 6.9 Medium
Asterisk: Local privilege escalation through ast_loggrabber's world-writable helper location
- asterisk
- certified-asterisk
- CWE-426
- CVSS 7.0 High
Asterisk: SQL Injection in cel_pgsql and cel_tds via CELGenUserEvent eventtype Field
- asterisk
- certified-asterisk
- SQL injection
- CVSS 8.2 High
Asterisk: Stack buffer overflow in MWI NOTIFY Message-Account parsing
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 6.0 Medium
Asterisk: Out-of-Bounds Write in Codec2 Decoder Due to Floor/Ceil Sample Count Mismatch
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 7.5 High
Asterisk: CVE-2022-37325 fix is absent from current chan_ooh323 Q.931 party-number parser
- asterisk
- certified-asterisk
- CWE-839
- CVSS 7.5 High
Asterisk: ARI REST-over-WebSocket read-only bypass allows arbitrary module path load and conditional RCE
- asterisk
- certified-asterisk
- Path traversal
- Broken access control
- CVSS 7.5 High
Asterisk: NULL Pointer Dereference in HTTP AMI Digest Authentication
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 8.1 High
Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes
- asterisk
- certified-asterisk
- Privilege escalation
- CWE-1220
- CVSS 7.1 High
Asterisk: Stack buffer overflow in res_xmpp XMPP namespace prefix handling
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 2.3 Low
Asterisk: Possible RED T.140 Generation Accumulation OOB Write
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 7.5 High
Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbounded vsprintf into Fixed 2048-byte Buffer
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 5.9 Medium
Asterisk: chan_unistim DIALPAGE digit handling can overflow phone_number and crash Asterisk
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 2.3 Low
Asterisk: Possible RED T.140 Heap Buffer Overflow
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 6.5 Medium
Asterisk: Buffer over-read in Asterisk PJSIP MWI body parser
- asterisk
- certified-asterisk
- CWE-126
- CWE-170
- CVSS 7.7 High
Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 6.3 Medium
Asterisk: Out-of-Bounds Read in Q.931 Information Element Parser (H.323 Addon)
- asterisk
- certified-asterisk
- Memory corruption
- CVSS 6.9 Medium
Asterisk: LDAP Filter Injection in res_config_ldap via SIP Username (Unauthenticated Information Disclosure)
- asterisk
- certified-asterisk
- Other injection
- CVSS 7.1 High
Asterisk: Heap-use-after-free in Asterisk PJSIP TCP/SDP handling when TCP connection closes during SDP processing
- asterisk
- certified-asterisk
- Memory corruption
- CWE-664
- CVSS 2.3 Low
Asterisk: Reflected XSS in Phone Provisioning HTTP Error Pages
- asterisk
- certified-asterisk
- Cross-site scripting (XSS)