digium kayıtları
digium üreticisine ait 119 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 13
- Düzeltme kaydı olan
- %89,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer17
- CWE-20 Improper Input Validation14
- CWE-399 Resource Management Errors8
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor7
- CWE-476 NULL Pointer Dereference6
- CWE-264 Permissions, Privileges, and Access Controls6
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
119 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
56Planlayın | CVE-2006-5444Kavram kanıtı | Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2digium · asterisk | Yüksek7,5 | — | %86,5 | 23 Eki 2006 |
54Planlayın | CVE-2017-17090Kavram kanıtı | An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified Asdigium · certified asterisk · CWE-459 | Yüksek7,5 | — | %81,5 | 1 Ara 2017 |
53Planlayın | CVE-2017-17850İstismar yok | An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older.digium · asterisk · CWE-20 | Yüksek7,5 | — | %75,4 | 27 Ara 2017 |
50Planlayın | CVE-2018-7284Kavram kanıtı | A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk thrdigium · asterisk · CWE-119 | Yüksek7,5 | — | %66,2 | 21 Şub 2018 |
50Planlayın | CVE-2019-18610İstismar yok | An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4.digium · asterisk · CWE-862 | Yüksek8,8 | — | %50,1 | 22 Kas 2019 |
46Planlayın | CVE-2018-17281İstismar yok | There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x digium · asterisk · CWE-400 | Yüksek7,5 | — | %52,4 | 24 Eyl 2018 |
45Planlayın | CVE-2017-14098İstismar yok | In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, odigium · asterisk · CWE-20 | Yüksek7,5 | — | %50,1 | 2 Eyl 2017 |
44Planlayın | CVE-2023-49294İstismar yok | Asterisk Path Traversal vulnerabilitydigium · asterisk · CWE-22 | Yüksek7,5 | — | %45,3 | 14 Ara 2023 |
43Planlayın | CVE-2017-14100İstismar yok | In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before digium · asterisk · CWE-78 | Kritik9,8 | — | %14,9 | 2 Eyl 2017 |
42Planlayın | CVE-2018-7286Kavram kanıtı | An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-certdigium · asterisk | Orta6,5 | — | %52,7 | 21 Şub 2018 |
41Planlayın | CVE-2022-26651İstismar yok | An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13.digium · asterisk · CWE-89 | Kritik9,8 | — | %7,0 | 15 Nis 2022 |
38İzleyin | CVE-2022-26499İstismar yok | An SSRF issue was discovered in Asterisk through 19.x.digium · asterisk · CWE-918 | Kritik9,1 | — | %7,8 | 15 Nis 2022 |
37İzleyin | CVE-2019-15639İstismar yok | main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a cradigium · asterisk · CWE-20 | Yüksek7,5 | — | %21,9 | 9 Eyl 2019 |
37İzleyin | CVE-2007-1306Kavram kanıtı | Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiationdigium · asterisk | Yüksek7,8 | — | %20,3 | 6 Mar 2007 |
37İzleyin | CVE-2017-14001İstismar yok | An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior.digium · asterisk gui · CWE-78 | Yüksek8,8 | — | %6,4 | 25 Eyl 2017 |
37İzleyin | CVE-2017-7617İstismar yok | Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13digium · asterisk · CWE-119 | Yüksek8,8 | — | %6,2 | 10 Nis 2017 |
37İzleyin | CVE-2014-8418İstismar yok | The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and Cdigium · certified asterisk · CWE-264 | Kritik9,0 | — | %3,6 | 24 Kas 2014 |
37İzleyin | CVE-2011-1599İstismar yok | manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.digium · asterisk · CWE-20 | Kritik9,0 | — | %3,1 | 26 Nis 2011 |
36İzleyin | CVE-2017-16671İstismar yok | A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterdigium · asterisk · CWE-119 | Yüksek8,8 | — | %3,3 | 8 Kas 2017 |
35İzleyin | CVE-2022-26498İstismar yok | An issue was discovered in Asterisk through 19.x.digium · asterisk · CWE-400 | Yüksek7,5 | — | %16,7 | 15 Nis 2022 |
35İzleyin | CVE-2012-1184Kavram kanıtı | Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allowsdigium · asterisk · CWE-119 | Yüksek7,5 | — | %16,4 | 18 Eyl 2012 |
35İzleyin | CVE-2014-2286İstismar yok | main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x befodigium · asterisk · CWE-20 | Yüksek7,5 | — | %16,4 | 18 Nis 2014 |
34İzleyin | CVE-2019-18976İstismar yok | An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x.digium · asterisk · CWE-476 | Yüksek7,5 | — | %12,8 | 22 Kas 2019 |
33İzleyin | CVE-2017-17664İstismar yok | A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified Asdigium · asterisk · CWE-119 | Orta5,9 | — | %32,4 | 13 Ara 2017 |
33İzleyin | CVE-2021-32558İstismar yok | An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certifdigium · asterisk · CWE-74 | Yüksek7,5 | — | %9,2 | 30 Tem 2021 |
- CVE-2006-544456Planlayın
Integer overflow in the get_input function in the Skinny channel driver (chan_skinny.c) in Asterisk 1.0.x before 1.0.12 and 1.2.x before 1.2
YüksekCVSS 7,5Kavram kanıtıEPSS %86digium · asterisk23 Eki 2006
- CVE-2017-1709054Planlayın
An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified As
YüksekCVSS 7,5Kavram kanıtıEPSS %82digium · certified asterisk1 Ara 2017
- CVE-2017-1785053Planlayın
An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older.
YüksekCVSS 7,5İstismar yokEPSS %75digium · asterisk27 Ara 2017
- CVE-2018-728450Planlayın
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk thr
YüksekCVSS 7,5Kavram kanıtıEPSS %66digium · asterisk21 Şub 2018
- CVE-2019-1861050Planlayın
An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4.
YüksekCVSS 8,8İstismar yokEPSS %50digium · asterisk22 Kas 2019
- CVE-2018-1728146Planlayın
There is a stack consumption vulnerability in the res_http_websocket.so module of Asterisk through 13.23.0, 14.7.x through 14.7.7, and 15.x
YüksekCVSS 7,5İstismar yokEPSS %52digium · asterisk24 Eyl 2018
- CVE-2017-1409845Planlayın
In the pjsip channel driver (res_pjsip) in Asterisk 13.x before 13.17.1 and 14.x before 14.6.1, a carefully crafted tel URI in a From, To, o
YüksekCVSS 7,5İstismar yokEPSS %50digium · asterisk2 Eyl 2017
- CVE-2023-4929444Planlayın
Asterisk Path Traversal vulnerability
YüksekCVSS 7,5İstismar yokEPSS %45digium · asterisk14 Ara 2023
- CVE-2017-1410043Planlayın
In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before
KritikCVSS 9,8İstismar yokEPSS %15digium · asterisk2 Eyl 2017
- CVE-2018-728642Planlayın
An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert
OrtaCVSS 6,5Kavram kanıtıEPSS %53digium · asterisk21 Şub 2018
- CVE-2022-2665141Planlayın
An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13.
KritikCVSS 9,8İstismar yokEPSS %7digium · asterisk15 Nis 2022
- CVE-2022-2649938İzleyin
An SSRF issue was discovered in Asterisk through 19.x.
KritikCVSS 9,1İstismar yokEPSS %8digium · asterisk15 Nis 2022
- CVE-2019-1563937İzleyin
main/translate.c in Sangoma Asterisk 13.28.0 and 16.5.0 allows a remote attacker to send a specific RTP packet during a call and cause a cra
YüksekCVSS 7,5İstismar yokEPSS %22digium · asterisk9 Eyl 2019
- CVE-2007-130637İzleyin
Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of service (crash) by sending a Session Initiation
YüksekCVSS 7,8Kavram kanıtıEPSS %20digium · asterisk6 Mar 2007
- CVE-2017-1400137İzleyin
An Improper Neutralization of Special Elements used in an OS Command issue was discovered in Digium Asterisk GUI 2.1.0 and prior.
YüksekCVSS 8,8İstismar yokEPSS %6digium · asterisk gui25 Eyl 2017
- CVE-2017-761737İzleyin
Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13
YüksekCVSS 8,8İstismar yokEPSS %6digium · asterisk10 Nis 2017
- CVE-2014-841837İzleyin
The DB dialplan function in Asterisk Open Source 1.8.x before 1.8.32, 11.x before 11.1.4.1, 12.x before 12.7.1, and 13.x before 13.0.1 and C
KritikCVSS 9,0İstismar yokEPSS %4digium · certified asterisk24 Kas 2014
- CVE-2011-159937İzleyin
manager.c in the Manager Interface in Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, 1.6.2.x before 1.6.2.17.3, and 1.
KritikCVSS 9,0İstismar yokEPSS %3digium · asterisk26 Nis 2011
- CVE-2017-1667136İzleyin
A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Aster
YüksekCVSS 8,8İstismar yokEPSS %3digium · asterisk8 Kas 2017
- CVE-2022-2649835İzleyin
An issue was discovered in Asterisk through 19.x.
YüksekCVSS 7,5İstismar yokEPSS %17digium · asterisk15 Nis 2022
- CVE-2012-118435İzleyin
Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x before 1.8.10.1 and 10.x before 10.2.1 allows
YüksekCVSS 7,5Kavram kanıtıEPSS %16digium · asterisk18 Eyl 2012
- CVE-2014-228635İzleyin
main/http.c in Asterisk Open Source 1.8.x before 1.8.26.1, 11.8.x before 11.8.1, and 12.1.x before 12.1.1, and Certified Asterisk 1.8.x befo
YüksekCVSS 7,5İstismar yokEPSS %16digium · asterisk18 Nis 2014
- CVE-2019-1897634İzleyin
An issue was discovered in res_pjsip_t38.c in Sangoma Asterisk through 13.x and Certified Asterisk through 13.21-x.
YüksekCVSS 7,5İstismar yokEPSS %13digium · asterisk22 Kas 2019
- CVE-2017-1766433İzleyin
A Remote Crash issue was discovered in Asterisk Open Source 13.x before 13.18.4, 14.x before 14.7.4, and 15.x before 15.1.4 and Certified As
OrtaCVSS 5,9İstismar yokEPSS %32digium · asterisk13 Ara 2017
- CVE-2021-3255833İzleyin
An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certif
YüksekCVSS 7,5İstismar yokEPSS %9digium · asterisk30 Tem 2021