UBUNTU-CVE-2022-42705

A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...

PT-2022-8171

🚨 CVE-2019-18976 An issue was discovered in res pjsip t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x. If it receives a re-invite initiating T.38 faxing and has a port of 0 and no c line in the SDP, a NULL pointer dereference and crash will occur. This is different...

PT-2021-17165 · Asterisk +2 · Asterisk +2

Name of the Vulnerable Software and Affected Versions: Asterisk versions 13.38.1 and earlier, 14.x, 15.x, 16.x through 16.16.0, 17.x through 17.9.1, and 18.x through 18.2.0 Certified Asterisk versions 16.8-cert5 and earlier Description: An issue in res pjsip session.c allows a remote server to...

UBUNTU-CVE-2020-35652

An issue was discovered in respjsipdiversion.c in Sangoma Asterisk before 13.38.0, 14.x through 16.x before 16.15.0, 17.x before 17.9.0, and 18.x before 18.1.0. A crash can occur when a SIP message is received with a History-Info header that contains a tel-uri, or when a SIP 181 response is...

Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk Code Issue Vulnerabilities

Sangoma Technologies Asterisk and Sangoma Technologies Certified Asterisk are both products of Sangoma Technologies, a Canadian company.Sangoma Technologies Asterisk is a suite of open source telephone switch PBX system software. Sangoma Technologies Asterisk is an open source telephone exchange...

ALPINE-CVE-2019-12827

Buffer overflow in respjsipmessaging in Digium Asterisk versions 13.21-cert3, 13.27.0, 15.7.2, 16.4.0 and earlier allows remote authenticated users to crash Asterisk by sending a specially crafted SIP MESSAGE message...

PT-2019-12969

Name of the Vulnerable Software and Affected Versions Digium Asterisk versions 13.21-cert3 through 16.4.0 Digium Asterisk versions prior to 13.21-cert3 Digium Asterisk versions prior to 15.7.2 However, considering the ranges and versions provided, the most concise form is: Digium Asterisk version...

PT-2014-7299

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions prior to 12.5.1 Description The issue allows remote authenticated users to cause a denial of service crash via crafted headers in a SIP SUBSCRIBE request for an event package. This is related to the res pjsip pubs...

PT-2014-8512

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions 12.x through 12.7.0 Asterisk Open Source versions 13.x through 13.0.0 Description The issue is related to a use-after-free vulnerability in the PJSIP channel driver. This vulnerability can be triggered by an...