Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

digium asterisk 1.4.38 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2

CVE-2011-2666

The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x up to and including 1.4.41.2 and 1.6.2.x up to and including 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote malicious users to enumerate account names by making a series...
Digium Asterisk 1.6.2.16.2Digium Asterisk 1.6.2.0Digium Asterisk 1.6.2.1Digium Asterisk 1.6.2.4Digium Asterisk 1.6.2.6Digium Asterisk 1.6.2.16Digium Asterisk 1.6.2.17Digium Asterisk 1.6.2.15Digium Asterisk 1.6.2.18.2Digium Asterisk 1.6.2.18.1Digium Asterisk 1.6.2.17.1Digium Asterisk 1.6.2.2Digium Asterisk 1.6.2.3Digium Asterisk 1.6.2.16.1Digium Asterisk 1.6.2.18Digium Asterisk 1.6.2.5Digium Asterisk 1.6.2.17.3Digium Asterisk 1.6.2.17.2Digium Asterisk 1.4.37Digium Asterisk 1.4.26.3Digium Asterisk 1.4.5Digium Asterisk 1.4.22
5
CVSSv2

CVE-2011-4597

The SIP over UDP implementation in Asterisk Open Source 1.4.x prior to 1.4.43, 1.6.x prior to 1.6.2.21, and 1.8.x prior to 1.8.7.2 uses different port numbers for responses to invalid requests depending on whether a SIP username exists, which allows remote malicious users to enum...
Digium Asterisk 1.8.3Digium Asterisk 1.8.2.4Digium Asterisk 1.8.0Digium Asterisk 1.8.6.0Digium Asterisk 1.8.1Digium Asterisk 1.8.1.2Digium Asterisk 1.8.7.1Digium Asterisk 1.8.7.0Digium Asterisk 1.8.4.3Digium Asterisk 1.8.4Digium Asterisk 1.8.4.4Digium Asterisk 1.8.5.0Digium Asterisk 1.8.3.1Digium Asterisk 1.8.3.2Digium Asterisk 1.8.4.2Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3.3Digium Asterisk 1.8.2.1Digium Asterisk 1.8.1.1Digium Asterisk 1.8.2Digium Asterisk 1.8.2.2Digium Asterisk 1.8.5
5
CVSSv2

CVE-2011-2535

chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x prior to 1.4.41.1, 1.6.2.x prior to 1.6.2.18.1, and 1.8.x prior to 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote m...
Digium Asterisk 1.8.3Digium Asterisk 1.8.2.4Digium Asterisk 1.8.0Digium Asterisk 1.8.1Digium Asterisk 1.8.1.2Digium Asterisk 1.8.4Digium Asterisk 1.8.3.1Digium Asterisk 1.8.3.2Digium Asterisk 1.8.4.2Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3.3Digium Asterisk 1.8.2.1Digium Asterisk 1.8.1.1Digium Asterisk 1.8.2Digium Asterisk 1.8.2.2Digium Asterisk 1.8.4.1Digium Asterisk 1.6.2.16.2Digium Asterisk 1.6.2.0Digium Asterisk 1.6.2.1Digium Asterisk 1.6.2.4Digium Asterisk 1.6.2.6Digium Asterisk 1.6.2.16
5
CVSSv2

CVE-2011-2536

chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x prior to 1.4.41.2, 1.6.2.x prior to 1.6.2.18.2, and 1.8.x prior to 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid ...
Digium Asterisk 1.8.3Digium Asterisk 1.8.2.4Digium Asterisk 1.8.0Digium Asterisk 1.8.1Digium Asterisk 1.8.1.2Digium Asterisk 1.8.4.3Digium Asterisk 1.8.4Digium Asterisk 1.8.3.1Digium Asterisk 1.8.3.2Digium Asterisk 1.8.4.2Digium Asterisk 1.8.2.3Digium Asterisk 1.8.3.3Digium Asterisk 1.8.2.1Digium Asterisk 1.8.1.1Digium Asterisk 1.8.2Digium Asterisk 1.8.2.2Digium Asterisk 1.8.4.1Digium Asterisk 1.6.2.16.2Digium Asterisk 1.6.2.0Digium Asterisk 1.6.2.1Digium Asterisk 1.6.2.4Digium Asterisk 1.6.2.6
6.8
CVSSv2

CVE-2011-1147

Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x prior to 1.4.39.2, 1.6.1.x prior to 1.6.1.22, 1.6.2.x prior to 1.6.2.16.2, and 1.8 prior to 1.8.2.4; Business Edition C...
Digium Asterisk 1.4.37Digium Asterisk 1.4.26.3Digium Asterisk 1.4.22Digium Asterisk 1.4.27Digium Asterisk 1.4.36Digium Asterisk 1.4.26Digium Asterisk 1.4.28Digium Asterisk 1.4.27.1Digium Asterisk 1.4.0Digium Asterisk 1.4.35Digium Asterisk 1.4.26.2Digium Asterisk 1.4.19.2Digium Asterisk 1.4.26.1Digium Asterisk 1.4.20Digium Asterisk 1.4.16Digium Asterisk 1.4.3Digium Asterisk 1.4.19.1Digium Asterisk 1.4.30Digium Asterisk 1.4.38Digium Asterisk 1.4.33Digium Asterisk 1.4.23Digium Asterisk 1.4.32
5
CVSSv2

CVE-2011-1507

Asterisk Open Source 1.4.x prior to 1.4.40.1, 1.6.1.x prior to 1.6.1.25, 1.6.2.x prior to 1.6.2.17.3, and 1.8.x prior to 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 do not restrict the number of unauthenticated sessions to certain interfaces, which allows remote ma...
Digium Asterisk 1.4.37Digium Asterisk 1.4.26.3Digium Asterisk 1.4.22Digium Asterisk 1.4.27Digium Asterisk 1.4.36Digium Asterisk 1.4.26Digium Asterisk 1.4.28Digium Asterisk 1.4.27.1Digium Asterisk 1.4.0Digium Asterisk 1.4.35Digium Asterisk 1.4.26.2Digium Asterisk 1.4.19.2Digium Asterisk 1.4.26.1Digium Asterisk 1.4.20Digium Asterisk 1.4.16Digium Asterisk 1.4.3Digium Asterisk 1.4.19.1Digium Asterisk 1.4.30Digium Asterisk 1.4.38Digium Asterisk 1.4.33Digium Asterisk 1.4.23Digium Asterisk 1.4.32
9
CVSSv2

CVE-2011-1599

manager.c in the Manager Interface in Asterisk Open Source 1.4.x prior to 1.4.40.1, 1.6.1.x prior to 1.6.1.25, 1.6.2.x prior to 1.6.2.17.3, and 1.8.x prior to 1.8.3.3 and Asterisk Business Edition C.x.x before C.3.6.4 does not properly check for the system privilege, which allows...
Digium Asterisk 1.4.37Digium Asterisk 1.4.26.3Digium Asterisk 1.4.22Digium Asterisk 1.4.27Digium Asterisk 1.4.36Digium Asterisk 1.4.26Digium Asterisk 1.4.28Digium Asterisk 1.4.27.1Digium Asterisk 1.4.0Digium Asterisk 1.4.35Digium Asterisk 1.4.26.2Digium Asterisk 1.4.19.2Digium Asterisk 1.4.26.1Digium Asterisk 1.4.20Digium Asterisk 1.4.16Digium Asterisk 1.4.3Digium Asterisk 1.4.19.1Digium Asterisk 1.4.30Digium Asterisk 1.4.38Digium Asterisk 1.4.33Digium Asterisk 1.4.23Digium Asterisk 1.4.32
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook