Known vulnerabilities in Asterisk Open Source - page 2

Software CPE: cpe:2.3:a:digium_linux_support_services:asterisk:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 87
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Asterisk Open Source Asterisk Open Source is affected by 87 known vulnerabilities: 8 high, 38 medium, 41 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU125904 - Stack-based buffer overflow
CVE-2026-25994
CWE-121 High
Available
No
20.19.0, 21.12.2, 22.9.0, 23.3.0 14.04.2026 SB2026030657
SB2026041668
SB2026052528
#VU125901 - Out-of-bounds read
CVE-2026-33069
CWE-125 Medium
No
No
20.19.0, 21.12.2, 22.9.0, 23.3.0 14.04.2026 SB2026030657
SB2026052528
#VU125899 - Use After Free
CVE-2026-32942
CWE-416 High
No
No
20.19.0, 21.12.2, 22.9.0, 23.3.0 14.04.2026 SB2026030657
SB2026052528
#VU123622 - Use After Free
CVE-2026-28799
CWE-416 High
No
No
20.19.0, 21.12.2, 22.9.0, 23.3.0 06.03.2026 SB2026030657
SB2026052528
#VU122443 - Incorrect Default Permissions
CVE-2026-23741
CWE-276 Low
No
No
20.18.2, 21.12.1, 22.8.2, 23.2.2 06.02.2026 SB2026020664
#VU122442 - Uncontrolled Search Path Element
CVE-2026-23740
CWE-427 Low
No
No
20.18.2, 21.12.1, 22.8.2, 23.2.2 06.02.2026 SB2026020664
#VU122441 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23738
CWE-79 Low
No
No
20.18.2, 21.12.1, 22.8.2, 23.2.2 06.02.2026 SB2026020664
#VU122440 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2026-23739
CWE-611 Low
No
No
20.18.2, 21.12.1, 22.8.2, 23.2.2 06.02.2026 SB2026020664
#VU114577 - Improper input validation
CVE-2025-57767
CWE-20 Medium
No
No
20.15.2, 21.10.2, 22.5.2 30.08.2025 SB2025083020
#VU114576 - Resource Management Errors
CVE-2025-54995
CWE-399 Low
No
No
18.26.4 30.08.2025 SB2025083019
#VU109794 - Protection Mechanism Failure
CVE-2025-47780
CWE-693 Low
No
No
18.26.2, 20.14.1, 21.9.1, 22.4.1 26.05.2025 SB2025052604
#VU109792 - Improper input validation
CVE-2025-47779
CWE-20 Medium
No
No
18.26.2, 20.14.1, 21.9.1, 22.4.1 26.05.2025 SB2025052604
#VU102519 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-53566
CWE-22 Low
No
No
18.26.1, 20.11.1, 21.6.1, 22.1.1 10.01.2025 SB2025011003
#VU96902 - NULL Pointer Dereference
CVE-2024-42491
CWE-476 Medium
No
No
18.24.3, 20.9.3, 21.4.3 05.09.2024 SB20240905106
#VU95788 - Permissions, Privileges, and Access Controls
CVE-2024-42365
CWE-264 Medium
Available
No
18.24.2, 20.9.2, 21.4.2 12.08.2024 SB2024081227
#VU69829 - Integer underflow
CVE-2022-37325
CWE-191 Medium
No
No
16.29.1, 18.15.1, 19.7.1, 20.0.1 02.12.2022 SB2022120212
SB2023022363
#VU69828 - Improper Privilege Management
CVE-2022-42706
CWE-269 Low
No
No
16.29.1, 18.15.1, 19.7.1, 20.0.1 02.12.2022 SB2022120212
SB2023022363
#VU69827 - Use After Free
CVE-2022-42705
CWE-416 Low
No
No
16.29.1, 18.15.1, 19.7.1, 20.0.1 02.12.2022 SB2022120212
SB2023022363
#VU62391 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-26651
CWE-89 High
No
No
16.25.2, 18.11.2, 19.3.2 19.04.2022 SB2022041930
SB2022112259
#VU62390 - Server-Side Request Forgery (SSRF)
CVE-2022-26499
CWE-918 Medium
No
No
16.25.2, 18.11.2, 19.3.2 19.04.2022 SB2022041930
SB2022112259


Showing elements 21 - 40 out of 87