Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

digium asterisk 1.8.2.3 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2011-2216
reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x prior to 1.8.4.2 does not initialize certain strings, which allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed Contact header.
Digium Asterisk 1.8.1Digium Asterisk 1.8.0Digium Asterisk 1.8.3Digium Asterisk 1.8.3.1Digium Asterisk 1.8.4Digium Asterisk 1.8.2.3Digium Asterisk 1.8.2.2Digium Asterisk 1.8.2.1Digium Asterisk 1.8.2Digium Asterisk 1.8.3.2Digium Asterisk 1.8.2.4Digium Asterisk 1.8.4.1Digium Asterisk 1.8.1.2Digium Asterisk 1.8.1.1Digium Asterisk 1.8.3.3
NA
CVE-2011-2665
reqresp_parser.c in the SIP channel driver in Asterisk Open Source 1.8.x prior to 1.8.4.3 allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a SIP packet with a Contact header that lacks a < (less than) character.
Digium Asterisk 1.8.4Digium Asterisk 1.8.1Digium Asterisk 1.8.0Digium Asterisk 1.8.1.1Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3Digium Asterisk 1.8.3.2Digium Asterisk 1.8.2.2Digium Asterisk 1.8.2.1Digium Asterisk 1.8.3.1Digium Asterisk 1.8.2.4Digium Asterisk 1.8.4.1Digium Asterisk 1.8.3.3Digium Asterisk 1.8.2Digium Asterisk 1.8.1.2Digium Asterisk 1.8.4.2
NA
CVE-2012-1184
Stack-based buffer overflow in the ast_parse_digest function in main/utils.c in Asterisk 1.8.x prior to 1.8.10.1 and 10.x prior to 10.2.1 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a long string in an HTTP Digest Auth...
Digium Asterisk 1.8.0Digium Asterisk 1.8.2.2Digium Asterisk 1.8.2.1Digium Asterisk 1.8.3Digium Asterisk 1.8.3.2Digium Asterisk 1.8.4.1Digium Asterisk 1.8.4.3Digium Asterisk 1.8.6.0Digium Asterisk 1.8.8.0Digium Asterisk 1.8.9.3Digium Asterisk 1.8.9.0Digium Asterisk 1.8.10.0Digium Asterisk 1.8.3.3Digium Asterisk 1.8.4Digium Asterisk 1.8.5Digium Asterisk 1.8.5.0Digium Asterisk 1.8.7.0Digium Asterisk 1.8.7.1Digium Asterisk 1.8.8.2Digium Asterisk 1.8.9.1Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3.1
NA
CVE-2011-4598
The handle_request_info function in channels/chan_sip.c in Asterisk Open Source 1.6.2.x prior to 1.6.2.21 and 1.8.x prior to 1.8.7.2, when automon is enabled, allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted sequ...
Digium Asterisk 1.8.4Digium Asterisk 1.8.3.3Digium Asterisk 1.8.0Digium Asterisk 1.8.2.2Digium Asterisk 1.8.2.1Digium Asterisk 1.8.3Digium Asterisk 1.8.3.2Digium Asterisk 1.8.4.1Digium Asterisk 1.8.2Digium Asterisk 1.8.2.4Digium Asterisk 1.8.4.2Digium Asterisk 1.8.4.3Digium Asterisk 1.8.6.0Digium Asterisk 1.8.1.1Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3.1Digium Asterisk 1.8.5Digium Asterisk 1.8.5.0Digium Asterisk 1.8.7.0Digium Asterisk 1.8.7.1Digium Asterisk 1.8.1.2Digium Asterisk 1.8.1
NA
CVE-2011-1175
tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x prior to 1.6.1.23, 1.6.2.x prior to 1.6.2.17.1, and 1.8.x prior to 1.8.3.1 allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) by establishing many short TCP sessions...
Digium Asterisk 1.6.1.21Digium Asterisk 1.6.1.20Digium Asterisk 1.6.1.1Digium Asterisk 1.6.1Digium Asterisk 1.6.1.5Digium Asterisk 1.6.1.9Digium Asterisk 1.6.1.10Digium Asterisk 1.6.1.13Digium Asterisk 1.6.1.0Digium Asterisk 1.6.1.16Digium Asterisk 1.6.1.19Digium Asterisk 1.6.1.2Digium Asterisk 1.6.1.7Digium Asterisk 1.6.1.18Digium Asterisk 1.6.1.14Digium Asterisk 1.6.1.22Digium Asterisk 1.6.1.3Digium Asterisk 1.6.1.4Digium Asterisk 1.6.1.8Digium Asterisk 1.6.1.12Digium Asterisk 1.6.1.11Digium Asterisk 1.6.1.6
NA
CVE-2011-1174
manager.c in Asterisk Open Source 1.6.1.x prior to 1.6.1.24, 1.6.2.x prior to 1.6.2.17.2, and 1.8.x prior to 1.8.3.2 allows remote malicious users to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data.
Digium Asterisk 1.6.1.20Digium Asterisk 1.6.1.19Digium Asterisk 1.6.1.10Digium Asterisk 1.6.1Digium Asterisk 1.6.1.6Digium Asterisk 1.6.1.7Digium Asterisk 1.6.1.21Digium Asterisk 1.6.1.1Digium Asterisk 1.6.1.5Digium Asterisk 1.6.1.9Digium Asterisk 1.6.1.17Digium Asterisk 1.6.1.13Digium Asterisk 1.6.1.0Digium Asterisk 1.6.1.16Digium Asterisk 1.6.1.18Digium Asterisk 1.6.1.12Digium Asterisk 1.6.1.15Digium Asterisk 1.6.1.23Digium Asterisk 1.6.1.22Digium Asterisk 1.6.1.3Digium Asterisk 1.6.1.4Digium Asterisk 1.6.1.8
NA
CVE-2012-3812
Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x prior to 1.8.13.1 and 10.x prior to 10.5.2, Certified Asterisk 1.8.11-certx prior to 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones prior to 10.5.2-digiumphones allows remote authenticate...
Digium Asterisk 1.8.0Digium Asterisk 1.8.1.2Digium Asterisk 1.8.2Digium Asterisk 1.8.2.4Digium Asterisk 1.8.3.2Digium Asterisk 1.8.4Digium Asterisk 1.8.4.4Digium Asterisk 1.8.5Digium Asterisk 1.8.5.0Digium Asterisk 1.8.7.0Digium Asterisk 1.8.8.0Digium Asterisk 1.8.8.1Digium Asterisk 1.8.9.0Digium Certified Asterisk 1.8.11Digium Asterisk 1.8.13.0Digium Asterisk 1.8.1.1Digium Asterisk 1.8.1Digium Asterisk 1.8.3.3Digium Asterisk 1.8.3Digium Asterisk 1.8.6.0Digium Asterisk 1.8.7.1Digium Asterisk 1.8.8.2
NA
CVE-2012-2947
chan_iax2.c in the IAX2 channel driver in Certified Asterisk 1.8.11-cert prior to 1.8.11-cert2 and Asterisk Open Source 1.8.x prior to 1.8.12.1 and 10.x prior to 10.4.1, when a certain mohinterpret setting is enabled, allows remote malicious users to cause a denial of service (da...
Debian Debian Linux 6.0Digium Asterisk 1.8.0Digium Asterisk 1.8.3Digium Asterisk 1.8.3.1Digium Asterisk 1.8.3.2Digium Asterisk 1.8.6.0Digium Asterisk 1.8.7.0Digium Asterisk 1.8.9.0Digium Asterisk 1.8.9.2Digium Asterisk 1.8.9.3Digium Asterisk 1.8.10.0Digium Asterisk 1.8.12.0Digium Asterisk 1.8.8.0Digium Asterisk 1.8.9.1Digium Asterisk 1.8.1Digium Asterisk 1.8.1.1Digium Asterisk 1.8.2.3Digium Asterisk 1.8.4Digium Asterisk 1.8.5Digium Asterisk 1.8.7.1Digium Asterisk 1.8.8.2Digium Asterisk 1.8.11.1
NA
CVE-2012-3863
channels/chan_sip.c in Asterisk Open Source 1.8.x prior to 1.8.13.1 and 10.x prior to 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx prior to 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones prior to 10.5.2-digiumphones does not...
Digium Asterisk Business Edition C.3.1Digium Asterisk Business Edition C.3.7.4Digium Asterisk Business Edition C.3.3Digium Asterisk 1.8.0Digium Asterisk 1.8.1Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3Digium Asterisk 1.8.4.1Digium Asterisk 1.8.4.2Digium Asterisk 1.8.6.0Digium Asterisk 1.8.8.0Digium Asterisk 1.8.9.2Digium Asterisk 1.8.9.0Digium Asterisk 1.8.11.0Digium Asterisk 1.8.11.1Digium Asterisk 1.8.1.2Digium Asterisk 1.8.1.1Digium Asterisk 1.8.3.2Digium Asterisk 1.8.4Digium Asterisk 1.8.7.0Digium Asterisk 1.8.7.1Digium Certified Asterisk 1.8.11
NA
CVE-2012-4737
channels/chan_iax2.c in Asterisk Open Source 1.8.x prior to 1.8.15.1 and 10.x prior to 10.7.1, Certified Asterisk 1.8.11 prior to 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones prior to 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enfo...
Digium Asterisk 1.8.10.1Digium Asterisk 1.8.10.0Digium Asterisk 1.8.9.0Digium Asterisk 1.8.9.2Digium Asterisk 1.8.8.0Digium Asterisk 1.8.8.1Digium Asterisk 1.8.12.0Digium Asterisk 1.8.0Digium Asterisk 1.8.3Digium Asterisk 1.8.3.1Digium Asterisk 1.8.6.0Digium Asterisk 1.8.7.0Digium Asterisk 1.8.14.0Digium Asterisk 1.8.14.1Digium Asterisk 1.8.11.0Digium Asterisk 1.8.9.3Digium Asterisk 1.8.8.2Digium Asterisk 1.8.12Digium Asterisk 1.8.9.1Digium Asterisk 1.8.1.1Digium Asterisk 1.8.4.1Digium Asterisk 1.8.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook