Linux Distros Unpatched Vulnerability : CVE-2019-18790

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in channels/chansip.c in Sangoma Asterisk 13.x before 13.29.2, 16.x before 16.6.2, and 17.x before 17.0.1, and Certified Asterisk 13.21...

SUSE CVE-2007-1594

The handleresponse function in chansip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service crash via a SIP Response code 0 in a SIP packet...

ALPINE-CVE-2019-13161

An issue was discovered in Asterisk Open Source through 13.27.0, 14.x and 15.x through 15.7.2, and 16.x through 16.4.0, and Certified Asterisk through 13.21-cert3. A pointer dereference in chansip while handling SDP negotiation allows an attacker to crash Asterisk when handling an SDP answer to a...

PT-2019-13165

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 13.27.0 and earlier, 14.x, 15.x through 15.7.2, and 16.x through 16.4.0 Certified Asterisk version 13.21-cert3 Description An issue allows an attacker to crash Asterisk when handling an SDP answer to an outgoing...

PT-2017-17846

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 13.x through 13.14.0 Asterisk Open Source versions 14.x through 14.3.0 Certified Asterisk versions 13.13 through 13.13-cert2 Description Remote code execution can occur due to a buffer overflow in a CDR user field...

Asterisk Open Source and Certified Asterisk 'chan_sip' authentication bypass vulnerability

Digium Asterisk Open Source is an open source telephone exchange PBX system software from Digium. The software supports voicemail, multi-party voice conferencing, interactive voice response IVR and so on. A security vulnerability exists in Digium Asterisk Open Source. An attacker could exploit th...

PT-2016-7883

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 13.12.x through 13.13.0 Asterisk Open Source versions 14.x through 14.2.0 Description An issue was discovered where the code responsible for parsing SDP offers or answers with the Opus codec and format parameters...

PT-2016-7884

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 11.x through 11.25.1 Asterisk Open Source versions 13.x through 13.13.1 Asterisk Open Source versions 14.x through 14.2.1 Certified Asterisk versions 11.x through 11.6-cert16 Certified Asterisk versions 13.x throu...

Asterisk IP-telephony DoS

The vulnerability of the chansip function in IP-telephony management systems of Certified Asterisk and Asterisk is related to the setting of the timert1 sip.conf value, which exceeds 1245. Exploiting this vulnerability allows a malicious actor to cause a service failure exhaustion of file...

PT-2016-1592

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 1.8.x through 11.21.1, 12.x, and 13.x through 13.7.1 Certified Asterisk versions 1.8.28, 11.6 through 11.6-cert12, and 13.1 through 13.1-cert3 Description The issue is related to the chan sip function in Asterisk...

DEBIAN-CVE-2014-2287

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.15 before 1.8.15-cert5 and 11.6 before 11.6-cert2, when chansip has a certain configuration, allows remote authenticated users to cause a denial of service...