Known vulnerabilities in Asterisk Open Source

Software CPE: cpe:2.3:a:digium_linux_support_services:asterisk:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 87
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Asterisk Open Source Asterisk Open Source is affected by 87 known vulnerabilities: 8 high, 38 medium, 41 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135559 - Numeric Range Comparison Without Minimum Check
CVE-2026-57186
CWE-839 Medium
No
No
21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135557 - Out-of-bounds write
CVE-2026-57194
CWE-787 Low
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135556 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-57200
CWE-22 Low
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135555 - Use After Free
CVE-2026-57187
CWE-416 Low
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135553 - Out-of-bounds read
CVE-2026-57184
CWE-125 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135552 - Insufficient Granularity of Access Control
CVE-2026-57202
CWE-1220 Low
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135551 - Out-of-bounds write
CVE-2026-57189
CWE-787 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135549 - Heap-based Buffer Overflow
CVE-2026-57198
CWE-122 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135548 - Buffer over-read
CVE-2026-57185
CWE-126 Low
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135547 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-57196
CWE-79 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135545 - Out-of-bounds write
CVE-2026-57192
CWE-787 Low
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135544 - Stack-based buffer overflow
CVE-2026-57201
CWE-121 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135542 - NULL Pointer Dereference
CVE-2026-57195
CWE-476 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135541 - Out-of-bounds write
CVE-2026-57199
CWE-787 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135539 - Stack-based buffer overflow
CVE-2026-57188
CWE-121 Low
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135538 - Stack-based buffer overflow
CVE-2026-57191
CWE-121 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135537 - Heap-based Buffer Overflow
CVE-2026-57197
CWE-122 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135536 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-57190
CWE-89 Low
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135534 - Improper Neutralization of Special Elements in Data Query Logic
CVE-2026-57193
CWE-943 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110
#VU135532 - Untrusted Search Path
CVE-2026-57203
CWE-426 Medium
No
No
20.20.1, 21.12.3, 22.10.1, 23.4.1 26.06.2026 SB20260626110


Showing elements 1 - 20 out of 87