Sangoma Asterisk 18.14.0

CPE Details

Sangoma Asterisk 18.14.0
sangoma
asterisk
18.14.0
2024-08-15
12h38 +00:00
2024-08-15
12h38 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:sangoma:asterisk:18.14.0:*:*:*:*:*:*:*

Informations

Vendor

sangoma

Product

asterisk

Version

18.14.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2022-37325 2022-12-04 23h00 +00:00 In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a crash.
7.5
High
CVE-2022-42705 2022-12-04 23h00 +00:00 A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing activity on that subscription.
6.5
Medium
CVE-2022-42706 2022-12-04 23h00 +00:00 An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to access files outside of the asterisk configuration directory, aka Directory Traversal.
4.9
Medium