Known vulnerabilities in asterisk
Vendor:
Fedoraproject
Software:
asterisk
Software CPE:
cpe:2.3:o:fedoraproject:asterisk:*:*:*:*:*:fedora:*:*
Website:
https://getfedora.org/
Total vulnerabilities:
15
Public exploits:
2
Known exploited (KEV):
0
Breakdown by Severity Chart
23.5.0-5.fc45
23.5.0-4.fc45
23.5.0-3.fc45
18.26.4-1.el9
18.26.4-1.el8
18.26.4-1.fc44
18.26.4-1.fc43
18.26.4-1.fc42
17.9.0-1.fc33
16.2.1-1.fc29
14.7.6-2.fc27
15.3.0-1.fc28
14.7.5-1.fc27
13.18.4-1.fc26
14.7.4-1.fc27
14.7.3-1.fc27
14.7.2-1.fc27
1.8.32.3-2.el6
13.7.1-1.fc23
13.7.1-1.fc22
1.8.32.3-1.el6
11.17.1-1.fc21
13.3.2-1.fc22
11.17.0-1.fc21
11.14.2-1.fc21
11.14.1-1.fc21
1.8.32.1-1.el6
1.8.31.1-1.el6
11.13.1-1.fc21
1.8.26.1-1.el6
1.8.20.0-1.el6
1.8.15.1-1.el6
1.8.12.2-1.el6
1.8.7.1-1.el6
1.8.4.4-3.el6
1.8.4.4-1.el6
1.8.4.3-1.el6
1.8.4.2-1.el6.1
1.8.3.3-1.el6
1.8.3.2-1.el6
1.8.3-1.el6
1.8.2.3-1.el6
1.8.11.1-1.el6
1.8.11.0-1.el6
1.8.10.1-1.el6
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU140816 - Improper Validation of Certificate with Host Mismatch CVE-2026-84975 |
CWE-297 | Medium | 23.5.0-5.fc45 | 03.08.2026 |
SB2026080389 SB2026092384 |
||
| #VU140808 - Off-by-one Error CVE-2026-57160 |
CWE-193 | Medium | 23.5.0-3.fc45, 23.5.0-4.fc45 | 03.08.2026 |
SB2026080389 SB2026091201 SB20260912386 |
||
| #VU33398 - Integer overflow CVE-2019-7251 |
CWE-190 | Medium | 16.2.1-1.fc29 | 28.03.2019 |
SB2019091659 SB2019030126 |
||
| #VU16065 - Missing release of memory after effective lifetime CVE-2017-16672 |
CWE-401 | Low | 14.7.6-2.fc27 | 26.11.2018 |
SB2018112617 SB2018050601 |
||
| #VU16064 - Buffer overflow CVE-2017-16671 |
CWE-120 | High | 14.7.6-2.fc27 | 24.11.2018 |
SB2018112617 SB2018050601 |
||
| #VU11775 - Integer overflow CVE-2018-1000098 |
CWE-190 | Low | 14.7.6-2.fc27 | 12.04.2018 |
SB2018041206 SB2018050601 SB2026041668 |
||
| #VU10697 - Improper input validation CVE-2018-7285 |
CWE-20 | Low | 14.7.6-2.fc27 | 22.02.2018 |
SB2018022218 SB2018050601 |
||
| #VU9736 - Improper input validation CVE-2017-17850 |
CWE-20 | Low | 14.7.5-1.fc27 | 23.12.2017 |
SB2017122102 SB2018112617 SB2017122814 |
||
| #VU5214 - Use of a Broken or Risky Cryptographic Algorithm CVE-2014-3566 |
CWE-327 | Medium | 1.8.31.1-1.el6, 11.13.1-1.fc21, 11.14.1-1.fc21 | 20.01.2017 |
SB2014101601 SB2014102102 SB2016022401 and 78 more |
||
| #VU32569 - Improper input validation CVE-2014-2287 |
CWE-20 | Low | 1.8.26.1-1.el6 | 19.04.2014 |
SB2014041902 SB2014031119 SB2014031501 |
||
| #VU32568 - Improper input validation CVE-2014-2286 |
CWE-20 | Medium | 1.8.26.1-1.el6 | 19.04.2014 |
SB2014041901 SB2014031118 SB2014031501 |
||
| #VU32728 - Memory corruption CVE-2012-5977 |
CWE-119 | Medium | 1.8.20.0-1.el6 | 04.01.2013 |
SB2013010403 SB2013011708 SB2013011814 |
||
| #VU32727 - Memory corruption CVE-2012-5976 |
CWE-119 | Medium | 1.8.20.0-1.el6 | 04.01.2013 |
SB2013010402 SB2013011707 SB2013011814 |
||
| #VU32803 - Stack-based buffer overflow CVE-2012-1183 |
CWE-121 | Medium | 1.8.10.1-1.el6, 1.8.11.0-1.el6 | 18.09.2012 |
SB2012091804 SB2012051405 SB2012032805 and 2 more |
||
| #VU32804 - Stack-based buffer overflow CVE-2012-1184 |
CWE-121 | Medium | 1.8.10.1-1.el6, 1.8.11.0-1.el6 | 18.09.2012 |
SB2012091805 SB2012051406 SB2012032805 and 2 more |