Product by Debian
Asterisk
72 known vulnerabilities in Asterisk (Debian), 0 of them actively exploited (CISA KEV).
Key figures
72
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
23
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2019-18610 | Digium Certified Asterisk: security vulnerability | 8.8 | |
| Critical | CVE-2022-26651 | Digium Certified Asterisk: SQL Injection | 9.8 | |
| Critical | CVE-2022-26499 | Digium Asterisk: Server-Side Request Forgery (SSRF) | 9.1 | |
| High | CVE-2018-7284 | Digium Asterisk: Buffer Overflow | 7.5 | |
| Critical | CVE-2026-25994 | PJSIP has a heap buffer overflow in ICE with long username | 9.8 | |
| High | CVE-2018-17281 | Digium Certified Asterisk: security vulnerability | 7.5 | |
| High | CVE-2022-26498 | Digium Asterisk: security vulnerability | 7.5 | |
| Critical | CVE-2022-21723 | Out-of-bounds read in multipart parsing in PJSIP | 9.1 | |
| High | CVE-2019-18976 | Digium Certified Asterisk: NULL Pointer Dereference | 7.5 | |
| Medium | CVE-2018-7286 | Digium Asterisk: security vulnerability | 6.5 | |
| High | CVE-2021-32558 | Digium Certified Asterisk: security vulnerability | 7.5 | |
| High | CVE-2023-49786 | Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation | 7.5 | |
| Critical | CVE-2021-43299 | Teluu PJSIP: Stack-based Buffer Overflow | 9.8 | |
| High | CVE-2023-49294 | Asterisk Path Traversal vulnerability | 4.9 | |
| Critical | CVE-2022-23608 | Use after free in PJSIP | 8.1 | |
| Critical | CVE-2021-43845 | Prevent out-of-bounds read in PJSIP | 8.2 | |
| High | CVE-2016-7551 | Digium Asterisk: Denial of Service | 7.5 | |
| Critical | CVE-2021-43301 | Teluu PJSIP: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2021-43300 | Teluu PJSIP: Stack-based Buffer Overflow | 9.8 | |
| Critical | CVE-2021-43303 | Teluu PJSIP: Classic Buffer Overflow | 9.8 | |
| Critical | CVE-2021-37706 | Potential integer underflow upon receiving STUN message in PJSIP | 7.3 | |
| Critical | CVE-2022-31031 | Potential stack buffer overflow when parsing message as a STUN client | 9.8 | |
| Critical | CVE-2022-24786 | Potential out-of-bound read/write in PJSIP | 9.8 | |
| Critical | CVE-2022-21722 | Potential out-of-bound read during RTP/RTCP parsing in PJSIP | 9.1 | |
| Medium | CVE-2021-46837 | Asterisk Certified Asterisk: security vulnerability | 6.5 |