Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior
Críticas / altas1458▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
12 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (4) | 3.2% | — | Digium Asterisk Business EditionDigium AsteriskDigium AsteriskeDigium Certified Asterisk | 9/7/2012 | 16/6/2026 | channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a… | |
| Modificada | Media (5) | 2.7% | — | Asterisk Business EditionAsterisk Open SourceAsterisk S800i Appliance | 14/1/2009 | 16/6/2026 | IAX2 in Asterisk Open Source 1.2.x before 1.2.31, 1.4.x before 1.4.23-rc4, and 1.6.x before 1.6.0.3-rc2; Business Edition A.x.x, B.x.x before B.2.5.7, C.1.x.x before C.1.10.4, and C.2.x.x before C.2.1.2.1; and s800i 1.2.x before 1.3.0 responds differently to a failed login attempt depending on whether the user account… | |
| Modificada | Media (4.3) | 2.0% | — | Asterisk Business EditionAsterisk Open Source | 17/12/2008 | 16/6/2026 | Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching. | |
| Modificada | Alta (7.8) | 3.4% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source | 24/7/2008 | 16/6/2026 | The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of… | |
| Modificada | Media (4.3) | 7.3% | 💥 Exploit | Asterisk Business EditionAsterisk Open Source | 4/6/2008 | 16/6/2026 | Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header, related to invocations of the… | |
| Modificada | Alta (7.1) | 1.4% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 23/4/2008 | 16/6/2026 | The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a… | |
| Modificada | Media (4.3) | 2.7% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 23/4/2008 | 16/6/2026 | The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls,… | |
| Modificada | Alta (7.5) | 12% | 💥 Exploit | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 24/3/2008 | 16/6/2026 | Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a… | |
| Modificada | Alta (9.3) | 3.8% | — | AsteriskAsterisk Appliance Developer KITAsterisk Business EditionAsterisknow+1 | 24/3/2008 | 16/6/2026 | The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it… | |
| Modificada | Alta (8.8) | 2.3% | — | AsteriskAsterisk Appliance Developer KITAsterisk Business EditionAsterisknow+2 | 20/3/2008 | 16/6/2026 | Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote… | |
| Modificada | Media (5) | 25% | 💥 Exploit | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 8/1/2008 | 16/6/2026 | The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message… | |
| Modificada | Media (4.3) | 2.0% | — | Asterisk Business EditionAsterisk Open Source | 20/12/2007 | 16/6/2026 | Asterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x before B.2.3.6 and C.x.x before C.1.0-beta8, when using database-based registrations ("realtime") and host-based authentication, does not check the IP address when the username is correct and there is no password, which allows… |