Debian Asterisk vulnerabilities

CVE-2009-0041 [MEDIUM] CVE-2009-0041: asterisk - IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1... IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account exists, which allows remote attackers to enumer

CVE-2010-1224 [MEDIUM] CVE-2010-1224: asterisk - main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1... main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x before 1.6.1.17, and 1.6.2.x before 1.6.2.5 does not properly enforce remote host access controls when CIDR notation "/0" is used in permit= and deny= configuration rules, which causes an improper arithmetic shift and might allow remote attackers to bypass ACL rules and access services from unautho

CVE-2022-42706 [MEDIUM] CVE-2022-42706: asterisk - An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.... An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal. Scope: local bullseye: resolved (fixed in 1:16.28.0~dfsg-0+deb11u2

CVE-2011-2529 [MEDIUM] CVE-2011-2529: asterisk - chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.... chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\0' characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet. Scope: local bullseye: resolved (fixed in 1:1.8.4.3-1) si

CVE-2013-5641 [MEDIUM] CVE-2013-5641: asterisk - The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x th... The SIP channel driver (channels/chan_sip.c) in Asterisk Open Source 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1, and 11.x before 11.5.1 and Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2 allows remote attackers to cause a denial of service (NULL pointer dereference, segmentation fault, and daemon crash) via an ACK with SDP to a pr

CVE-2012-5976 [MEDIUM] CVE-2012-5976: asterisk - Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before ... Multiple stack consumption vulnerabilities in Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones allow remote attackers to cause a denial of service (daemon crash) via TCP data using the (1) SIP, (2) HTTP, or

CVE-2011-2536 [MEDIUM] CVE-2011-2536: asterisk - chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41... chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x before 1.4.41.2, 1.6.2.x before 1.6.2.18.2, and 1.8.x before 1.8.4.4, and Asterisk Business Edition C.3.x before C.3.7.3, disregards the alwaysauthreject option and generates different responses for invalid SIP requests depending on whether the user account exists, which allows remote attackers to e

CVE-2013-2264 [MEDIUM] CVE-2013-2264: asterisk - The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x befor... The SIP channel driver in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; Asterisk Business Edition (BE) C.3.x before C.3.8.1; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones exhibits different behavior for invalid INVITE, SUBSCRIBE, and REGISTER transact

CVE-2012-2416 [MEDIUM] CVE-2012-2416: asterisk - chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11... chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service (daemon crash) by sending a SIP UPDATE message that triggers a connected-line update attempt without an asso

CVE-2011-2535 [MEDIUM] CVE-2011-2535: asterisk - chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.... chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impac

CVE-2014-8416 [MEDIUM] CVE-2014-8416: asterisk - Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source... Use-after-free vulnerability in the PJSIP channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1, when using the res_pjsip_refer module, allows remote attackers to cause a denial of service (crash) via an in-dialog INVITE with Replaces message, which triggers the channel to be hung up. Scope: local bullseye: resolved (fixed in 1:13.1.0~dfs

CVE-2014-8414 [MEDIUM] CVE-2014-8414: asterisk - ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11... ConfBridge in Asterisk 11.x before 11.14.1 and Certified Asterisk 11.6 before 11.6-cert8 does not properly handle state changes, which allows remote attackers to cause a denial of service (channel hang and memory consumption) by causing transitions to be delayed, which triggers a state change from hung up to waiting for media. Scope: local bullseye: resolved (fixed

CVE-2013-2686 [MEDIUM] CVE-2013-2686: asterisk - main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10... main/http.c in the HTTP server in Asterisk Open Source 1.8.x before 1.8.20.2, 10.x before 10.12.2, and 11.x before 11.2.2; Certified Asterisk 1.8.15 before 1.8.15-cert2; and Asterisk Digiumphones 10.x-digiumphones before 10.12.2-digiumphones does not properly restrict Content-Length values, which allows remote attackers to conduct stack-consumption attacks and caus

CVE-2011-4063 [MEDIUM] CVE-2011-4063: asterisk - chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.... chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which allows remote authenticated users to cause a denial of service (daemon crash) via a malformed request. Scope: local bullseye: resolved (fixed in 1:1.8.7.1~dfsg-1) sid: resolved (fixed in 1:

CVE-2014-8415 [MEDIUM] CVE-2014-8415: asterisk - Race condition in the chan_pjsip channel driver in Asterisk Open Source 12.x bef... Race condition in the chan_pjsip channel driver in Asterisk Open Source 12.x before 12.7.1 and 13.x before 13.0.1 allows remote attackers to cause a denial of service (assertion failure and crash) via a cancel request for a SIP session with a queued action to (1) answer a session or (2) send ringing. Scope: local bullseye: resolved (fixed in 1:13.1.0~dfsg-1) sid: r

CVE-2009-4055 [MEDIUM] CVE-2009-4055: asterisk - rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.... rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x before C.2.4.6, and C.3.x.x before C.3.2.3; and s800i 1.3.x before 1.3.0.6 allows remote attackers to cause a denial of service (daemon crash) via an RTP comfort noise payload with a long dat

CVE-2008-1923 [HIGH] CVE-2008-1923: asterisk - The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.... The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message. Scope: local bullseye: resolved (

CVE-2010-0441 [MEDIUM] CVE-2010-0441: asterisk - Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2... Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service (daemon crash) via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is (1) missing, (2) modified to contain a negative number, or (3) modified to contain a large

CVE-2011-1174 [MEDIUM] CVE-2011-1174: asterisk - manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.... manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x before 1.6.2.17.2, and 1.8.x before 1.8.3.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a series of manager sessions involving invalid data. Scope: local bullseye: resolved (fixed in 1:1.8.3.3-1) sid: resolved (fixed in 1:1.8.3.3-1)

CVE-2012-1183 [MEDIUM] CVE-2012-1183: asterisk - Stack-based buffer overflow in the milliwatt_generate function in the Miliwatt a... Stack-based buffer overflow in the milliwatt_generate function in the Miliwatt application in Asterisk 1.4.x before 1.4.44, 1.6.x before 1.6.2.23, 1.8.x before 1.8.10.1, and 10.x before 10.2.1, when the o option is used and the internal_timing option is off, allows remote attackers to cause a denial of service (application crash) via a large number of samples in an