| Bug | Description |
|---|
| CVE-2003-0761 | Buffer overflow in the get_msg_text of chan_sip.c in the Session ... |
| CVE-2003-0779 | SQL injection vulnerability in the Call Detail Record (CDR) logging ... |
| CVE-2005-2081 | Stack-based buffer overflow in the function that parses commands in ... |
| CVE-2005-3559 | Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 ... |
| CVE-2006-1827 | Integer signedness error in format_jpeg.c in Asterisk 1.2.6 and ... |
| CVE-2006-2898 | The IAX2 channel driver (chan_iax2) for Asterisk 1.2.x before 1.2.9 ... |
| CVE-2006-4345 | Stack-based buffer overflow in channels/chan_mgcp.c in MGCP in ... |
| CVE-2006-4346 | Asterisk 1.2.10 supports the use of client-controlled variables to ... |
| CVE-2006-5444 | Integer overflow in the get_input function in the Skinny channel ... |
| CVE-2006-5445 | Unspecified vulnerability in the SIP channel driver ... |
| CVE-2007-1306 | Asterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote ... |
| CVE-2007-1561 | The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 ... |
| CVE-2007-1595 | The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk ... |
| CVE-2007-2293 | Multiple stack-based buffer overflows in the process_sdp function in ... |
| CVE-2007-2294 | The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 ... |
| CVE-2007-2297 | The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x ... |
| CVE-2007-2383 | The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data ... |
| CVE-2007-2488 | The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does ... |
| CVE-2007-3762 | Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in ... |
| CVE-2007-3763 | The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and ... |
| CVE-2007-3764 | The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and ... |
| CVE-2007-3765 | The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW ... |
| CVE-2007-4103 | The IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x before ... |
| CVE-2007-4280 | The Skinny channel driver (chan_skinny) in Asterisk Open Source before ... |
| CVE-2007-4455 | The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before ... |
| CVE-2007-4521 | Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an ... |
| CVE-2007-5358 | Multiple buffer overflows in the voicemail functionality in Asterisk ... |
| CVE-2007-6170 | SQL injection vulnerability in the Call Detail Record Postgres logging ... |
| CVE-2007-6171 | SQL injection vulnerability in the Postgres Realtime Engine ... |
| CVE-2007-6430 | Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and ... |
| CVE-2008-0095 | The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, ... |
| CVE-2008-1289 | Multiple buffer overflows in Asterisk Open Source 1.4.x before ... |
| CVE-2008-1332 | Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, ... |
| CVE-2008-1333 | Format string vulnerability in Asterisk Open Source 1.6.x before ... |
| CVE-2008-1390 | The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before ... |
| CVE-2008-1897 | The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, ... |
| CVE-2008-1923 | The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision ... |
| CVE-2008-2119 | Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business ... |
| CVE-2008-3263 | The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x ... |
| CVE-2008-3264 | The FWDOWNL firmware-download implementation in Asterisk Open Source ... |
| CVE-2008-3903 | Asterisk Open Source 1.2.x before 1.2.32, 1.4.x before 1.4.24.1, and ... |
| CVE-2008-5558 | Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition ... |
| CVE-2008-7220 | Unspecified vulnerability in Prototype JavaScript framework ... |
| CVE-2009-0041 | IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before ... |
| CVE-2009-0871 | The SIP channel driver in Asterisk Open Source 1.4.22, 1.4.23, and ... |
| CVE-2009-2346 | The IAX2 protocol implementation in Asterisk Open Source 1.2.x before ... |
| CVE-2009-2651 | main/rtp.c in Asterisk Open Source 1.6.1 before 1.6.1.2 allows remote ... |
| CVE-2009-2726 | The SIP channel driver in Asterisk Open Source 1.2.x before 1.2.34, ... |
| CVE-2009-3723 | Unauthorized calls allowed on prohibited networks in asterisk |
| CVE-2009-3727 | Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, ... |
| CVE-2009-4055 | rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before ... |
| CVE-2010-0441 | Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, ... |
| CVE-2010-0685 | The design of the dialplan functionality in Asterisk Open Source ... |
| CVE-2010-1224 | main/acl.c in Asterisk Open Source 1.6.0.x before 1.6.0.25, 1.6.1.x ... |
| CVE-2011-0495 | Stack-based buffer overflow in the ast_uri_encode function in ... |
| CVE-2011-1147 | Multiple stack-based and heap-based buffer overflows in the (1) ... |
| CVE-2011-1174 | manager.c in Asterisk Open Source 1.6.1.x before 1.6.1.24, 1.6.2.x ... |
| CVE-2011-1175 | tcptls.c in the TCP/TLS server in Asterisk Open Source 1.6.1.x before ... |
| CVE-2011-1507 | Asterisk Open Source 1.4.x before 1.4.40.1, 1.6.1.x before 1.6.1.25, ... |
| CVE-2011-1599 | manager.c in the Manager Interface in Asterisk Open Source 1.4.x ... |
| CVE-2011-2216 | reqresp_parser.c in the SIP channel driver in Asterisk Open Source ... |
| CVE-2011-2529 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x ... |
| CVE-2011-2535 | chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x ... |
| CVE-2011-2536 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.4.x ... |
| CVE-2011-2665 | reqresp_parser.c in the SIP channel driver in Asterisk Open Source ... |
| CVE-2011-4063 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x ... |
| CVE-2011-4597 | The SIP over UDP implementation in Asterisk Open Source 1.4.x before ... |
| CVE-2011-4598 | channels/chan_sip.c in Asterisk Open Source 1.6.2.x before 1.6.2.21 ... |
| CVE-2012-0885 | chan_sip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x ... |
| CVE-2012-1183 | Asterisk: Remote Crash Vulnerability in Milliwatt Application |
| CVE-2012-2414 | main/manager.c in the Manager Interface in Asterisk Open Source ... |
| CVE-2012-2415 | Heap-based buffer overflow in chan_skinny.c in the Skinny channel ... |
| CVE-2012-2416 | chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x ... |