CVE-2017-16671

CVE-2017-16671 affects Asterisk Open Source 13.x (<13.18.1), 14.x (<14.7.1), 15.x (<15.1.1) and Certified Asterisk 13.13 (=13.23.1, and FreeBSD/FreeBSD-based advisories mirror the fix trajectory. If exploiting, an attacker could trigger overflow via crafted CDR updates. No exploitation s...

CVE-2011-0495

CVE-2011-0495 affects Asterisk Open Source prior to the fixed versions listed in multiple advisories. The issue is a stack-based buffer overflow in ast_uri_encode in main/utils.c that can be triggered by crafted caller ID data and exploited via (1) SIP channel driver, (2) URIENCODE dialplan funct...

CVE-2021-46837

CVE-2021-46837 affects res_pjsip_t38 in Sangoma Asterisk 16.x prior to 16.16.2, 17.x prior to 17.9.3, 18.x prior to 18.2.2, and Certified Asterisk before 16.8-cert7. A crash can be triggered by an m=image line with zero port in a response to a T.38 re-invite initiated by Asterisk; the crash is du...

CVE-2017-17664

CVE-2017-17664 affects Asterisk Open Source: 13.x before 13.18.4, 14.x before 14.7.4, 15.x before 15.1.4, and Certified Asterisk before 13.13-cert9. Certain compound RTCP packets trigger a crash in the RTCP stack, resulting in a remote crash/DoS condition. The connected sources indicate upstream ...

CVE-2011-1147

CVE-2011-1147 affects Asterisk Open Source and related builds: stack/heap buffer overflows in the UDPTL handling (decode_open_type and udptl_rx_packet) may allow a remote attacker to crash the process or execute arbitrary code. Affected products include Asterisk Open Source 1.4.x before 1.4.39.2,...

CVE-2012-5977

CVE-2012-5977 affects Asterisk Open Source 1.8.x <1.8.19.1, 10.x <10.11.1, 11.x <11.1.2 and Certified Asterisk 1.8.11<1.8.11-cert10, plus Asterisk Digiumphones 10.x=1.8.19.1, 10.x >=10.11.1, or 11.x >=11.1.2 (as applicable). Exploitation details or in-the-wild status are not pro...

CVE-2016-9938

CVE-2016-9938 affects Asterisk Open Source chan_sip: improper stripping of non‑printable ASCII whitespace between SIP header name and a colon allows certain To/header combinations to bypass authentication when used with an authenticating SIP proxy. Affected: 11.x < 11.25.1, 13.x < 13.13.1, ...

CVE-2009-2651

CVE-2009-2651 affects Asterisk Open Source 1.6.1 up to, but not including, 1.6.1.2. A remote attacker can trigger a Denial of Service by sending an RTP text frame without a required delimiter, causing a NULL pointer dereference and an invalid pointer calculation. The issue is mitigated by upgradi...

CVE-2014-2286

CVE-2014-2286 affects Asterisk Open Source by vulnerable main/http.c in 1.8.x <1.8.26.1, 11.8.x <11.8.1, and 12.1.x <12.1.1 (and Certified Asterisk

CVE-2007-4103

The CVE-2007-4103 issue affects the IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x (pre-1.2.23), Asterisk Open 1.4.x (pre-1.4.9), and Asterisk Appliance Developer Kit (pre-0.6.0). When configured to allow unauthenticated calls, remote attackers can cause denial of service by flooding call...

CVE-2014-8412

CVE-2014-8412 affects Asterisk Open Source and Certified Asterisk: 1.8.x (before 1.8.32.1), 11.x (before 11.14.1), 12.x (before 12.7.1), 13.x (before 13.0.1); Certified Asterisk 1.8.28 (before 1.8.28-cert3) and 11.6 (before 11.6-cert8). The vulnerability is a bypass of ACL restrictions in the VoI...

CVE-2016-2232

CVE-2016-2232 affects Asterisk Open Source: vulnerable are Asterisk Open Source 1.8.x, 11.x before 11.21.1, 12.x, and 13.x before 13.7.1, and Certified Asterisk 1.8.28, 11.6 before 11.6-cert12, and 13.1 before 13.1-cert3. The issue is a denial of service caused by an uninitialized pointer derefer...

CVE-2007-1306

CVE-2007-1306 affects Asterisk SIP: a NULL pointer dereference in the SIP handling code can be triggered by a remote attacker sending a SIP packet that lacks a URI and SIP-version header, causing a crash (DoS). Affected versions per public sources: Asterisk 1.4.x before 1.4.1 and 1.2.x before 1.2...

CVE-2011-2529

CVE-2011-2529 affects Asterisk Open Source: chan_sip.c in the SIP channel driver fails to properly handle '\0' characters in SIP packets, allowing remote attackers to trigger memory corruption and possibly cause a denial of service (and other impact). Affected are Asterisk 1.6.x before 1.6.2.18.1...

CVE-2012-2947

CVE-2012-2947 affects the IAX2 channel driver in Asterisk: when mohinterpret is enabled, a remote attacker placing a call on hold can crash the daemon (DoS). Affected: Certified Asterisk 1.8.11-cert before 1.8.11-cert2; Asterisk Open Source 1.8.x before 1.8.12.1; Asterisk 10.x before 10.4.1. Root...

CVE-2014-9374

CVE-2014-9374: A double free vulnerability in Asterisk’s WebSocket Server (res_http_websocket) can crash remote servers by processing a zero-length frame after a non-zero-length frame. Affected: Asterisk Open Source 11.x before 11.14.2, 12.x before 12.7.2, 13.x before 13.0.2, and Certified Asteri...

CVE-2018-19278

CVE-2018-19278 affects Digium Asterisk 15.x (before 15.6.2) and 16.x (before 16.0.1). The issue is a buffer overflow in DNS SRV and NAPTR lookups, caused by a mismatch between the buffer size and the compressed vs expanded length, which can be triggered by specially crafted DNS responses and may ...

CVE-2012-3812

CVE-2012-3812 is a double-free vulnerability in Asterisk voicemail handling that can be abused by remote authenticated users to crash the daemon when accessing both Urgent and INBOX mailboxes. Affected products and versions: Asterisk Open Source 1.8.x prior to 1.8.13.1; Asterisk Open Source 10.x ...

CVE-2009-3727

CVE-2009-3727 affects Asterisk Open Source (various 1.2.x, 1.4.x, 1.6.x lineages; Business Edition; AsteriskNOW; s800i). Root cause: different error messages for valid/invalid SIP usernames via crafted REGISTER messages, enabling remote username enumeration via inconsistent To header URI and Dige...

CVE-2011-1174

CVE-2011-1174 affects Asterisk Open Source, specifically manager.c in 1.6.1.x (before 1.6.1.24), 1.6.2.x (before 1.6.2.17.2), and 1.8.x (before 1.8.3.2). The issue allows remote attackers to trigger a denial of service via a series of manager sessions with invalid data. Connected advisories also ...

CVE-2005-3559

CVE-2005-3559 is a directory traversal vulnerability in vmail.cgi of Asterisk, affecting 1.0.9 through 1.2.0-beta1 and enabling remote access to WAV files via a .. in the folder parameter. The issue is documented across multiple feeds (Debian DSA-1048-1 and SUSE/Nessus entries) with remediation g...

CVE-2010-0685

The CVE-2010-0685 entry affects Asterisk Open Source 1.2.x/1.4.x/1.6.x and Asterisk Business Edition B.x.x/C.x.x, where the Dialplan expansion of the ${EXTEN} channel variable with wildcard pattern matches can be exploited by context-dependent attackers to inject strings into the dialplan. This a...

CVE-2011-2536

CVE-2011-2536 (Asterisk) affects Asterisk Open Source 1.4.x < 1.4.41.2, 1.6.2.x < 1.6.2.18.2, 1.8.x < 1.8.4.4, and Asterisk Business Edition C.3.x

CVE-2018-7287

CVE-2018-7287 affects Digium/Asterisk 15.x up to 15.2.1. The issue is in the WebSocket handling of the HTTP server (res_http_websocket.c): when WebSocket payloads of size 0 are received (with the HTTP server enabled, default disabled), the code mishandles the payload, causing a busy loop and pote...

CVE-2006-5445

Summary: CVE-2006-5445 affects the SIP channel driver (channels/chan_sip.c) in Asterisk. Affected versions are Asterisk 1.2.x before 1.2.13 and 1.4.x before 1.4.0-beta3. Impact: remote attackers can cause a denial of service through resource consumption by triggering creation of a real pvt struct...

CVE-2009-2726

CVE-2009-2726 affects the Asterisk SIP channel driver and is a DoS due to improper input handling in sscanf-style processing of SIP packets. Affected products and versions include Asterisk Open Source 1.2.x up to 1.2.34, 1.4.x up to 1.4.26.1, 1.6.0.x up to 1.6.0.12, 1.6.1.x up to 1.6.1.4, along w...

CVE-2003-0761

CVE-2003-0761 describes a buffer overflow in the get_msg_text function of chan_sip.c within the SIP implementation of Asterisk, affecting releases prior to August 15, 2003. The flaw allows remote attackers to cause arbitrary code execution via certain MESSAGE or INFO requests. Affected component:...

CVE-2012-1183

CVE-2012-1183 affects the Asterisk Miliwatt (milliwatt_generate) in multiple releases: 1.4.x prior to 1.4.44, 1.6.x prior to 1.6.2.23, 1.8.x prior to 1.8.10.1, and 10.x prior to 10.2.1. The flaw is a stack-based buffer overflow in the milliwatt_generate function when the o option is used and inte...

CVE-2014-4046

CVE-2014-4046 affects Asterisk Open Source 11.x before 11.10.1 and 12.x before 12.3.1, plus Certified Asterisk 11.6 before 11.6-cert3, allowing remote authenticated Manager users to execute arbitrary shell commands via a MixMonitor action. Public advisories (Debian DLA-455-1, Mageia MGASA-2014-03...

CVE-2011-2535

CVE-2011-2535 affects Asterisk Open Source 1.4.x (before 1.4.41.1), 1.6.2.x (before 1.6.2.18.1), and 1.8.x (before 1.8.4.3), plus Asterisk Business Edition C.3 (before C.3.7.3). The flaw is in chan_iax2.c (IAX2 channel driver) where an option frame can be used to access a memory address, enabling...

CVE-2011-4597

CVE-2011-4597 affects Asterisk Open Source SIP over UDP implementations in 1.4.x up to 1.4.43, 1.6.x up to 1.6.2.21, and 1.8.x up to 1.8.7.2. The vulnerability arises from using different port numbers for responses to invalid requests based on whether a SIP username exists, enabling remote attack...

CVE-2014-4048

CVE-2014-4048 affects the Asterisk Open Source PJSIP Channel Driver up to version 12.3.0. An attacker (remote, potentially after bypassing authentication per AST-2014-008) can terminate a subscription before it completes, triggering a SIP transaction timeout and causing a deadlock in the thread s...

CVE-2006-2898

CVE-2006-2898 affects the IAX2 channel driver (chan_iax2) in Asterisk 1.2.x before 1.2.9 and 1.0.x before 1.0.11. The vulnerability allows remote attackers to crash the Asterisk server and, per reports, may enable arbitrary code execution via truncated IAX2 video frames that bypass length checks ...

CVE-2011-1175

CVE-2011-1175 affects Asterisk Open Source TCP/TLS server: tcptls.c allows remote denial of service (NULL pointer dereference/daemon crash) by establishing many short TCP sessions to services using a TLS API. Affected versions are 1.6.1.x < 1.6.1.23, 1.6.2.x < 1.6.2.17.1, and 1.8.x

CVE-2012-3863

CVE-2012-3863 affects Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2 (also in various packaged releases such as Certified Asterisk and Digiumphones) due to improper handling of a provisional SIP reINVITE response in channels/chan_sip.c. This can allow remote authenticated users...

CVE-2014-8417

CVE-2014-8417 affects Asterisk’s ConfBridge: remote authenticated users can escalate privileges via the external protocol to the CONFBRIDGE dialplan function or run arbitrary commands via a crafted ConfbridgeStartRecord AMI action. Affected: Asterisk 11.x pre-11.14.1, 12.x pre-12.7.1, 13.x pre-13...

CVE-2012-4737

CVE-2012-4737 affects Asterisk Open Source 1.8.x prior to 1.8.15.1 and 10.x prior to 10.7.1 (also affected Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x, and Asterisk Business Edition C.3.x before C.3.7.6). The vulnerability arises because ACL rules are not enforced du...

CVE-2014-8415

CVE-2014-8415 is a race condition in the chan_pjsip channel driver of Asterisk Open Source, affecting 12.x before 12.7.1 and 13.x before 13.0.1. A remote attacker can trigger a denial of service (assertion failure and crash) by sending a cancel request for a SIP session with a queued action to ei...

CVE-2007-6170

CVE-2007-6170 affects the Call Detail Record Postgres logging engine (cdr_pgsql) in Asterisk. The vulnerability arises because ANI and DNIS are not properly escaped before SQL execution, enabling remote authenticated users to inject commands. Affected product versions include Asterisk 1.4.x befor...

CVE-2011-2665

Summary: CVE-2011-2665 affects Asterisk Open Source 1.8.x prior to 1.8.4.3. The SIP channel driver’s reqresp_parser.c contains a flaw where a SIP packet with a Contact header lacking a left angle bracket (

CVE-2012-3553

CVE-2012-3553 affects Asterisk Open Source 10.x prior to 10.5.1, specifically chan_skinny.c (Skinny/SCCP channel driver). A NULL pointer dereference in off-hook state when a Station Key Pad Button message is closed can be exploited by remote authenticated users to crash the server (DoS). Remediat...

CVE-2003-0779

CVE-2003-0779 corresponds to an SQL injection in the Asterisk Call Detail Record (CDR) logging. A remote attacker can modify the CallerID string to cause arbitrary SQL execution due to unsafe query construction in the CDR logging path. The NVD/metrics indicate a CVSSv2 base score of 7.5 (HIGH) wi...

CVE-2011-1599

CVE-2011-1599 affects Asterisk Manager Interface (manager.c) where insufficient privilege checks allow remote authenticated users to execute arbitrary commands via an Originate action with Async header and an Application header. Affected: Asterisk Open Source 1.4.x < 1.4.40.1, 1.6.1.x < 1.6...

CVE-2014-8413

The CVE-2014-8413 issue affects Asterisk Open Source 12.x (before 12.7.1) and 13.x (before 13.0.1). The res_pjsip_acl module does not properly create/load ACLs defined in pjsip.conf at startup, allowing remote attackers to bypass intended PJSIP ACL rules. Impact is remote, unauthenticated access ...

CVE-2011-1507

CVE-2011-1507 affects Asterisk Open Source across multiple branches: 1.4.x (before 1.4.40.1), 1.6.1.x (before 1.6.1.25), 1.6.2.x (before 1.6.2.17.3), and 1.8.x (before 1.8.3.3), plus Asterisk Business Edition C.x.x before C.3.6.4. The issue allows an unauthenticated remote attacker to exhaust fil...

CVE-2014-2289

CVE-2014-2289 affects Asterisk Open Source 12.x prior to 12.1.0 in res/res_pjsip_exten_state.c (PJSIP channel driver). A remote authenticated user can trigger a denial of service (crash) by sending a SUBSCRIBE request without Accept headers, causing an invalid pointer dereference. The issue is fi...

CVE-2011-2666

CVE-2011-2666 affects Asterisk Open Source SIP channel, where the default configuration does not enable the alwaysauthreject option in the SIP channel driver. This allows remote attackers to enumerate account names by sending a series of invalid SIP requests and observing differences in responses...

CVE-2014-2288

The CVE-2014-2288 entry concerns the PJSIP channel driver in Asterisk Open Source 12.x prior to 12.1.1. When qualify_frequency is enabled on an AOR and the remote SIP server challenges authentication for the resulting OPTIONS, remote attackers can crash a PJSIP endpoint that has no associated out...

CVE-2012-1184

CVE-2012-1184 affects Asterisk 1.8.x (before 1.8.10.1) and 10.x (before 10.2.1). A stack-based overflow in ast_parse_digest (main/utils.c) allows remote attackers to crash the service or potentially execute arbitrary code by sending a long string in an HTTP Digest Authentication header. This is d...

CVE-2014-8414

CVE-2014-8414 affects Asterisk 11.x (before 11.14.1) and Certified Asterisk 11.6 (before 11.6-cert8). The issue arises in ConfBridge where state changes are not handled correctly, allowing remote attackers to trigger a denial of service by delaying state transitions, causing the channel to hang a...