What’s Vulnerable › Products

asterisk Certified Asterisk vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your asterisk Certified Asterisk version is affected

Latest asterisk Certified Asterisk vulnerabilities

• CVE-2024-42365 — Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan (CVSS 8.8)
• CVE-2021-46837 — (CVSS 6.5)
• CVE-2022-23608 — Use after free in PJSIP (CVSS 9.8)
• CVE-2022-21723 — Out-of-bounds read in multipart parsing in PJSIP (CVSS 9.1)
• CVE-2021-37706 — Potential integer underflow upon receiving STUN message in PJSIP (CVSS 9.8)
• CVE-2020-28242 — (CVSS 6.5)
• CVE-2017-9358 — (CVSS 7.5)
• CVE-2013-2686 — (CVSS 5.0)
• CVE-2013-2264 — (CVSS 5.0)
• CVE-2012-2186 — (CVSS 9.0)
• CVE-2012-2948 — (CVSS 4.0)