CVE-2022-23608

CVE-2022-23608 affects PJSIP/pjproject up to version 2.11.1. In a dialog set (or forking) scenario, a hash key shared by multiple UAC dialogs can be prematurely freed when a dialog is destroyed, causing the same dialog set to be registered in the hash table multiple times with different hash keys...

CVE-2022-21723

CVE-2022-21723 affects PJSIP (pjproject) up to version 2.11.1. The issue arises when parsing an incoming SIP message that contains a malformed multipart, which can lead to an out-of-bounds read access. The vulnerability impacts all PJSIP users that accept SIP multipart. A patch has been committed...

CVE-2012-2948

CVE-2012-2948 affects the Skinny (SCCP) channel driver (chan_skinny.c) in Asterisk. The vulnerability lets remote authenticated users trigger a NULL pointer dereference that can crash the daemon by closing a connection in off-hook mode. Affected releases include Certified Asterisk 1.8.11-cert bef...

CVE-2021-37706

CVE-2021-37706 affects the pjproject/PJSIP stack embedded in various products. If an incoming STUN message contains an ERROR-CODE attribute, the code path does not check the header length before a subtraction, enabling an integer underflow that could let a malicious actor remotely execute code vi...

CVE-2020-28242

CVE-2020-28242 affects Asterisk Open Source: 13.x < 13.37.1, 16.x < 16.14.1, 17.x < 17.8.1, 18.x < 18.0.1, and Certified Asterisk

CVE-2022-42705

CVE-2022-42705 affects Sangoma Asterisk: use-after-free in res_pjsip_pubsub.c on Asterisk 16.28, 18.14, 19.6 and certified/18.9-cert2. An authenticated remote attacker can crash Asterisk (DoS) by performing activity on a subscription via a reliable transport while Asterisk is also performing acti...

CVE-2024-42491

CVE-2024-42491 affects Asterisk before versions 18.24.3, 20.9.3, 21.4.3 (and certified- branches 18.9-cert12, 20.7-cert2). When res_resolver_unbound is loaded and Asterisk sends a SIP request to a URI with a host starting with .1 or [.1], Asterisk will crash with a SEGV. Mitigation: upgrade to 18...

CVE-2020-28327

A vulnerability in Asterisk’s SIP handling (res_pjsip_session) can crash the process when a new SIP Invite is processed. The issue arises from a gap between dialog object creation and its next use, potentially allowing another thread to free the dialog and leading to a crash on dereference. Affec...

CVE-2022-42706

CVE-2022-42706 affects Sangoma Asterisk up to versions including 16.28, 17, 18 up to 18.14, and 19 up to 19.6, with certification through 18.9-cert1. The flaw, exposed via GetConfig over Asterisk Manager Interface, permits a connected application to read files outside the asterisk configuration d...

CVE-2024-53566

CVE-2024-53566 affects Sangoma Asterisk versions v22, 22.0.0-rc1/rc2/pre1, where the function action_listcategories() (in Sangoma/Asterisk) can be abused to perform a path traversal . Public advisories and CVE records corroborate that the issue arises via AMI exposure (path traversal outside the ...

CVE-2022-37325

CVE-2022-37325 affects Sangoma Asterisk up to 16.28.0, 17.x, 18.x up to 18.14.0, and 19.x up to 19.6.0. The vulnerability is triggered by an incoming Setup message to addons/ooh323c/src/ooq931.c containing a malformed Calling or Called Party IE, which can cause a crash (denial of service). Connec...

CVE-2025-47779

CVE-2025-47779 affects Asterisk and certified-asterisk where SIP MESSAGE authentication requests can be misaligned, enabling an authenticated attacker to spoof a user identity and send spam/fake chat messages that appear to come from trusted entities. Impact includes potential social engineering ...

CVE-2024-57520

CVE-2024-57520 affects Asterisk v22 with an Insecure Permissions vulnerability in the action_createconfig function that could allow a remote attacker to execute arbitrary code. The supplier disputes the impact, noting the effect may be limited to creating empty files outside the Asterisk product ...

CVE-2009-3723

Technical details about CVE-2009-3723 are not publicly provided in the connected documents; monitor for updates from vendors and security trackers for affected versions, impact, and fixes.

CVE-2012-2186

CVE-2012-2186 affects Asterisk Open Source in 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6. The flaw is an incomplete blacklist ...

CVE-2025-47780

CVE-2025-47780 affects Asterisk and certified-asterisk. Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 (and 18.9-cert14, 20.7-cert5 for certified-asterisk), configuring cli_permissions.conf with deny=!* to block shell commands on the CLI does not work, potentially allowing shell access wh...

CVE-2009-2346

CVE-2009-2346 affects the IAX2 protocol implementation in Asterisk (multiple releases across 1.2.x/1.4.x/1.6.x lines and Business/C.x branches; s800i) and allows a remote attacker to exhaust the call-number space by issuing a high volume of IAX2 messages, causing a denial of service. Connected ad...

CVE-2026-23741

CVE-2026-23741 affects Asterisk prior to specific patched versions (20.7-cert9, 20.18.2, 21.12.1, 22.8.2, 23.2.2). The ast_coredumper script runs as root and sources /etc/asterisk/ast_debug_tools.conf, which is located in a folder writable by the asterisk user:group. Because the file is sourced w...

CVE-2018-12228

CVE-2018-12228 affects Asterisk Open Source 15.x before 15.4.1. When connected via TCP/TLS, if the client disconnects abruptly or sends a specially crafted message, Asterisk can enter an infinite loop while reading the data stream, resulting in a denial of service and rendering the system unusabl...

CVE-2024-35190

CVE-2024-35190 affects the Asterisk project, where after upgrading to 18.23.0 all unauthorized SIP requests were identified as the PJSIP Endpoint of the local Asterisk server due to res_pjsip_endpoint_identifier_ip behavior. The issue is fixed in Asterisk releases 18.23.1, 20.8.1, and 21.3.1. Imp...

CVE-2017-9358

CVE-2017-9358 describes a memory exhaustion vulnerability in Asterisk Open Source. Affected versions are Asterisk Open Source 13.x before 13.15.1, 14.x before 14.4.1, and Certified Asterisk 13.13 before 13.13-cert4. The issue is triggered by specially crafted SCCP packets that cause an infinite l...

CVE-2025-49832

CVE-2025-49832 affects Asterisk (open source PBX/telephony toolkit). The vulnerability lies in the file asterisk/res/res_stir_shaken/verification.c, enabling remote DoS and possible RCE under two conditions: (1) an attacker can set an arbitrary Identity header, or (2) STIR/SHAKEN is enabled with ...

CVE-2026-23740

Asterisk contains a local privilege escalation flaw: if ast_coredumper writes gdb init/output to a world-writable directory (e.g., /tmp), a local attacker with write access to that directory can cause arbitrary commands to execute as root or overwrite files by manipulating the gdb init and output...

CVE-2025-1131

Summary : CVE-2025-1131 is a local privilege escalation in the Asterisk toolkit. The vulnerability arises when Asterisk is started via the safe_asterisk script, which sources all shells in /etc/asterisk/startup.d/ as root without validating ownership/permissions. Non-root users with write access ...

CVE-2026-23739

CVE-2026-23739 concerns Asterisk’s ast_xml_open() in xml.c, which parses XML using libxml with unsafe options (XML_PARSE_NOENT) and later processes XIncludes, enabling external entity processing. If untrusted XML is provided, this can trigger XML External Entity (XXE) or XInclude-based local file...

CVE-2025-54995

CVE-2025-54995 affects Asterisk (open source private branch exchange). The vulnerability arises from a lack of session termination, allowing RTP UDP ports and internal resources to leak, which could lead to resource exhaustion. Debian and other advisories state this was fixed in Asterisk versions...

CVE-2026-23738

CVE-2026-23738 affects Asterisk; prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user-supplied cookie/GET parameter values are echoed into the HTML of the /httpstatus page without escaping, enabling reflected XSS. The issue is mitigated by upgrading to the patched series (20.7...

CVE-2025-57767

Asterisk contains a vulnerability in res_pjsip_authenticator_digest: if a SIP request carries an Authorization header with a realm mismatch relative to a previous 401, or an incorrect realm without a prior 401, get_authorization_header() can return NULL, and subsequent use to obtain the digest al...