4016 matches found
CVE-2019-18790
An issue was discovered in channels/chansip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5. A SIP request can be sent to Asterisk that can change a SIP peer's IP address. A REGISTER does not need to occur, and calls...
Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk Command Execution Vulnerabilities
Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk are both products of Sangoma Technologies, a Canadian company.Sangoma Technologies Asterisk is a suite of open source telephone switch PBX system software. Sangoma Technologies Asterisk is an open source telephone exchange...
Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk Code Issue Vulnerabilities
Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk are both products of Sangoma Technologies, a Canadian company.Sangoma Technologies Asterisk is a suite of open source telephone switch PBX system software. Sangoma Technologies Asterisk is an open source telephone exchange...
CVE-2019-18790: Missing Authorization
An issue was discovered in channels/chansip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21 before cert5. A SIP request can be sent to Asterisk that can change a SIP peer's IP address. A REGISTER does not need to occur, and calls...
CVE-2019-18610: Missing Authorization
An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface AMI user without system authorization could use a specially crafted Originate AMI request to execute arbitrary syst...
PT-2019-15535
Name of the Vulnerable Software and Affected Versions Sangoma Asterisk versions 13.x through 17.x Certified Asterisk versions 13.21 through 13.21-cert4 Description An issue was discovered in the manager.c file, allowing a remote authenticated Asterisk Manager Interface AMI user without system...
Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk Denial of Service Vulnerabilities
Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk are both products of Sangoma Technologies, a Canadian company.Sangoma Technologies Asterisk is a suite of open source telephone switch PBX system software. Sangoma Technologies Asterisk is an open source telephone exchange...
CVE-2019-18976: NULL Pointer Dereference
An issue was discovered in respjsipt38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different from CVE-2019-18940...
PT-2019-5836
Name of the Vulnerable Software and Affected Versions Asterisk versions prior to 13.21-x Certified Asterisk versions prior to 13.21-x Description The issue is related to a null pointer dereference in the res pjsip t38.c component of Asterisk and Certified Asterisk systems. This can be exploited b...
PT-2019-15667
Name of the Vulnerable Software and Affected Versions Sangoma Asterisk versions 13.x through 13.29.1 Sangoma Asterisk versions 16.x through 16.6.1 Sangoma Asterisk versions 17.x through 17.0.0 Certified Asterisk versions 13.21 through cert4 Description An issue was discovered in channels/chan sip...
Asterisk DoS Vulnerability (AST-2019-008)
Asterisk is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if...
Asterisk Multiple Vulnerabilities (AST-2019-006, AST-2019-007)
Asterisk is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if description...
Asterisk Open Source CVE-2019-18976 Denial of Service Vulnerability
Description Asterisk Open Source is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to crash the application, resulting in a denial-of-service condition. Technologies Affected Asterisk Certified Asterisk 13.21 Asterisk Certified Asterisk 13.21-cert Asterisk...
Asterisk Manager Interface CVE-2019-18610 Arbitrary Command Execution Vulnerability
Description Asterisk Manager Interface is prone to an arbitrary command-execution vulnerability. An attacker can exploit this issue to execute arbitrary system command on the affected system. This may aid in further attacks. The following Asterisk products are affected: Asterisk Open Source...
Multiple Asterisk Products CVE-2019-18790 Authorization Bypass Vulnerability
Description Multiple Asterisk Products are prone to an authorization-bypass vulnerability. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions; this may aid in launching further attacks. The following products are affected: Versions prior to...
Asterisk Denial of Service (CVE-2018-12228)
A denial-of-service vulnerability has been reported in Asterisk. The vulnerability is due to improper handling of client abrupt disconnection or client-supplied messages when client is connecting via TLS. A remote user can exploit the vulnerability by abruptly disconnecting or sending specially...
asterisk -- Re-invite with T.38 and malformed SDP causes crash
The Asterisk project reports: If Asterisk receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a crash will occur...
CVE-2009-3723
asterisk allows calls on prohibited networks...
