Known vulnerabilities in Asterisk Open Source - page 3

Software CPE: cpe:2.3:a:digium_linux_support_services:asterisk:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 87
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Asterisk Open Source Asterisk Open Source is affected by 87 known vulnerabilities: 8 high, 38 medium, 41 low Critical High Medium Low

Vulnerabilities (87)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU62355 - Resource exhaustion
CVE-2022-26498
CWE-400 Medium
No
No
16.25.2, 18.11.2, 19.3.2 15.04.2022 SB2022041516
SB2022112259
#VU60862 - Use After Free
CVE-2022-23608
CWE-416 High
No
No
16.24.1, 18.10.1, 19.2.1 24.02.2022 SB2022022414
SB2022030601
SB2022112259
and 3 more
#VU60861 - Out-of-bounds read
CVE-2022-21723
CWE-125 Medium
No
No
16.24.1, 18.10.1, 19.2.1 24.02.2022 SB2022022414
SB2022030601
SB2022112259
and 3 more
#VU60857 - Integer overflow
CVE-2021-37706
CWE-190 High
No
No
16.24.1, 18.10.1, 19.2.1 24.02.2022 SB2022022414
SB2022030601
SB2022112259
and 4 more
#VU55295 - Uncaught Exception
CVE-2021-32686
CWE-248 Medium
No
No
13.38.3, 16.19.1, 17.9.4, 18.5.1 26.07.2021 SB2021072606
SB2021072608
SB2021110229
and 2 more
#VU55294 - Improper input validation
CVE-2021-32558
CWE-20 Medium
No
No
13.38.3, 16.19.1, 17.9.4, 18.5.1 26.07.2021 SB2021072607
SB2021110229
#VU55286 - Resource Management Errors
CVE-2021-31878
CWE-399 Low
No
No
16.19.1, 18.5.1 25.07.2021 SB2021072607
#VU50966 - Improper input validation
CVE-2021-26717
CWE-20 Medium
No
No
- 18.02.2021 SB2021021823
SB2021022611
#VU50962 - Improper Resource Shutdown or Release
CVE-2020-28327
CWE-404 Medium
No
No
- 06.11.2020 SB2020110617
SB2021022607
SB2021011289
#VU22936 - Improper input validation
CVE-2019-18976
CWE-20 Medium
No
No
13.29.2 22.11.2019 SB2019112218
#VU22935 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-18610
CWE-78 High
No
No
13.29.2, 16.6.2, 17.0.1 22.11.2019 SB2019112218
SB2019120225
#VU22934 - Improper Access Control
CVE-2019-18790
CWE-284 Medium
No
No
13.29.2, 16.6.2, 17.0.1 22.11.2019 SB2019112218
SB2019120226
#VU15900 - Buffer overflow
CVE-2018-19278
CWE-120 Medium
Available
No
15.6.2, 16.0.1 15.11.2018 SB2018111501
SB2019091656
#VU14912 - Stack-based buffer overflow
CVE-2018-17281
CWE-121 Medium
No
No
13.23.1, 14.7.8, 15.6.1 24.09.2018 SB2018092401
SB2018101714
SB2018112617
#VU13261 - Loop with Unreachable Exit Condition ('Infinite Loop')
CWE-835 Low
No
No
15.4.1 12.06.2018 SB2018061204
#VU13262 - Exposure of sensitive information to an unauthorized actor
CWE-200 Low
No
No
13.21.1, 14.7.7, 15.4.1 12.06.2018 SB2018061204
#VU10717 - Improper input validation
CWE-20 Low
No
No
- 26.02.2018 SB2018022218
#VU10716 - Improper input validation
CWE-20 Low
No
No
- 26.02.2018 SB2018022218
#VU10698 - Improper input validation
CVE-2018-7284
CWE-20 Low
Available
No
- 22.02.2018 SB2018022218
SB2018101714
#VU10697 - Improper input validation
CVE-2018-7285
CWE-20 Low
No
No
- 22.02.2018 SB2018022218
SB2018050601


Showing elements 41 - 60 out of 87