Asterisk vulnerabilities
37 CVEs and advisories name Asterisk as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-42491A malformed Contact or Record-Route URI in an incoming SIP request can cause Asterisk to crash when res_resolver_unbound is used
- CVE-2024-42365Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan
- CVE-2024-35190Asterisk' res_pjsip_endpoint_identifier_ip: wrongly matches ALL unauthorized SIP requests
- CVE-2023-49786Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation
- CVE-2023-37457Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'
- CVE-2023-49294Asterisk Path Traversal vulnerability
- CVE-2009-3723asterisk allows calls on prohibited networks