Asterisk@20.0.0 Security Vulnerabilities and Issues — Asterisk@20.0.0 CVE List

Lucene search

SangomaAsterisk20.0.0

3 matches found

CVE•added 2022/12/05 9:15 p.m.•98 views

CVE-2022-42706

An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.

4.9CVSS5.8AI score0.00202EPSS

CVE•added 2022/12/05 9:15 p.m.•82 views

CVE-2022-42705

A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...

6.5CVSS6.5AI score0.00771EPSS

CVE•added 2022/12/05 9:15 p.m.•79 views

CVE-2022-37325

In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a crash.

7.5CVSS7.3AI score0.0022EPSS