PT-2019-13165

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 13.27.0 and earlier, 14.x, 15.x through 15.7.2, and 16.x through 16.4.0 Certified Asterisk version 13.21-cert3 Description An issue allows an attacker to crash Asterisk when handling an SDP answer to an outgoing...

CVE-2019-12827: Out-of-bounds Write

Buffer overflow in respjsipmessaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message...

PT-2019-12969

Name of the Vulnerable Software and Affected Versions Digium Asterisk versions 13.21-cert3 through 16.4.0 Digium Asterisk versions prior to 13.21-cert3 Digium Asterisk versions prior to 15.7.2 However, considering the ranges and versions provided, the most concise form is: Digium Asterisk version...

CVE-2018-15891

An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name...

Design/Logic Flaw

An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name...

CVE-2018-15891

An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name...

CVE-2018-15891

An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name...

CVE-2019-18976

An issue was discovered in respjsipt38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different from CVE-2019-18940...

PT-2019-9197

Name of the Vulnerable Software and Affected Versions FreePBX core versions prior to 3.0.122.43 FreePBX core versions prior to 14.0.18.34 FreePBX core versions prior to 5.0.1beta4 Description An issue was discovered that allows an attacker to store JavaScript commands in a module name by crafting...

CVE-2018-15891: Improper Neutralization of Input During Web Page Generation

An issue was discovered in FreePBX core before 3.0.122.43, 14.0.18.34, and 5.0.1beta4. By crafting a request for adding Asterisk modules, an attacker is able to store JavaScript commands in a module name...

asterisk -- Remote crash vulnerability with MESSAGE messages

The Asterisk project reports: A specially crafted SIP in-dialog MESSAGE message can cause Asterisk to crash...

CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

Design/Logic Flaw

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

DEBIAN-CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

UBUNTU-CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

CVE-2016-7550

asterisk 13.10.0 is affected by: denial of service issues in asterisk. The impact is: cause a denial of service remote...

CVE-2016-7550

CVE-2016-7550 affects the Asterisk 13.10.0 package. The connected documents consistently report a denial of service issue that can be triggered remotely, impacting availability. The underlying root cause and exact vulnerable component/function are not detailed in the provided sources. There is no...