Debian DSA-5358-1 : asterisk - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5358 advisory. Multiple security vulnerabilities have been discovered in Asterisk, an Open Source Private Branch Exchange. Buffer overflows and other programming errors could be...

FreeBSD : Asterisk -- multiple vulnerabilities (8dd438ed-a338-11ed-b48b-589cfc0f81b0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8dd438ed-a338-11ed-b48b-589cfc0f81b0 advisory. - In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0,...

CVE-2022-42705

creationtimestamp| type| source ---|---|--- 2022-12-06 00:40:31+00:00| seen| https://t.me/cibsecurity/54038...

DEBIAN-CVE-2022-42705

A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...

CVE-2022-42705

A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...

CVE-2022-42705

CVE-2022-42705 affects Sangoma Asterisk: use-after-free in res_pjsip_pubsub.c on Asterisk 16.28, 18.14, 19.6 and certified/18.9-cert2. An authenticated remote attacker can crash Asterisk (DoS) by performing activity on a subscription via a reliable transport while Asterisk is also performing acti...

Asterisk Multiple Vulnerabilities (AST-2022-007, AST-2022-008, AST-2022-009)

Asterisk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if description...