Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2544▼ 345 respecto a la semana anterior
Críticas / altas1339▲ 68 respecto a la semana anterior
Nueva explotación activa (KEV)6▼ 6 respecto a la semana anterior
Sin puntuar (sin CVSS)62▼ 466 respecto a la semana anterior
16 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.8) | 3.5% | — | Digium AsteriskDigium AsterisknowDigium S800i | 15/3/2011 | 16/6/2026 | Multiple stack-based and heap-based buffer overflows in the (1) decode_open_type and (2) udptl_rx_packet functions in main/udptl.c in Asterisk Open Source 1.4.x before 1.4.39.2, 1.6.1.x before 1.6.1.22, 1.6.2.x before 1.6.2.16.2, and 1.8 before 1.8.2.4; Business Edition C.x.x before C.3.6.3; AsteriskNOW 1.5; and s800i… | |
| Modificada | Media (6) | 4.2% | — | Digium AsteriskDigium AsterisknowFedoraproject FedoraDebian Linux+1 | 20/1/2011 | 16/6/2026 | Stack-based buffer overflow in the ast_uri_encode function in main/utils.c in Asterisk Open Source before 1.4.38.1, 1.4.39.1, 1.6.1.21, 1.6.2.15.1, 1.6.2.16.1, 1.8.1.2, 1.8.2.; and Business Edition before C.3.6.2; when running in pedantic mode allows remote authenticated users to execute arbitrary code via crafted… | |
| Modificada | Media (5) | 4.2% | — | Digium AsteriskDigium AsterisknowDigium S800i | 10/11/2009 | 16/6/2026 | Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.3, 1.6.0.x before 1.6.0.17, and 1.6.1.x before 1.6.1.9; Business Edition A.x.x, B.x.x before B.2.5.12, C.2.x.x before C.2.4.5, and C.3.x.x before C.3.2.2; AsteriskNOW 1.5; and s800i 1.3.x before 1.3.0.5 generate different error messages depending on whether… | |
| Modificada | Alta (7.8) | 3.4% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source | 24/7/2008 | 16/6/2026 | The FWDOWNL firmware-download implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x, B.x.x before B.2.5.4, and C.x.x before C.1.10.3; AsteriskNOW; Appliance Developer Kit 0.x.x; and s800i 1.0.x before 1.2.0.1 allows remote attackers to cause a denial of… | |
| Modificada | Alta (7.1) | 1.4% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 23/4/2008 | 16/6/2026 | The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends "early audio" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a… | |
| Modificada | Media (4.3) | 2.7% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 23/4/2008 | 16/6/2026 | The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B.x.x before B.2.5.2, and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3, when configured to allow unauthenticated calls,… | |
| Modificada | Alta (9.3) | 3.8% | — | AsteriskAsterisk Appliance Developer KITAsterisk Business EditionAsterisknow+1 | 24/3/2008 | 16/6/2026 | The AsteriskGUI HTTP server in Asterisk Open Source 1.4.x before 1.4.19-rc3 and 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6, AsteriskNOW before 1.0.2, Appliance Developer Kit before revision 104704, and s800i 1.0.x before 1.1.0.2 generates insufficiently random manager ID values, which makes it… | |
| Modificada | Alta (7.5) | 12% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 24/3/2008 | 16/6/2026 | Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote attackers to (1) write a… | |
| Modificada | Alta (8.8) | 2.3% | — | AsteriskAsterisk Appliance Developer KITAsterisk Business EditionAsterisknow+2 | 20/3/2008 | 16/6/2026 | Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote… | |
| Modificada | Media (5) | 25% | — | Asterisk Appliance Developer KITAsterisk Business EditionAsterisknowAsterisk Open Source+1 | 8/1/2008 | 16/6/2026 | The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revision 95946, and Appliance s800i 1.0.x before 1.0.3.4 allows remote attackers to cause a denial of service (daemon crash) via a BYE message… | |
| Modificada | Media (5) | 1.8% | — | AsteriskAsterisk Appliance Developer KITAsterisknow | 22/8/2007 | 16/6/2026 | The SIP channel driver (chan_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0.x before 0.8.0, and s800i (Asterisk Appliance) 1.x before 1.0.3 allows remote attackers to cause a denial of service (memory exhaustion) via a SIP dialog that causes a large… | |
| Modificada | Baja (3.5) | 1.1% | — | AsteriskAsterisk Appliance Developer KITAsterisknowAsterisk S800i | 9/8/2007 | 16/6/2026 | The Skinny channel driver (chan_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7.0, and Appliance s800i before 1.0.3 allows remote authenticated users to cause a denial of service (application crash) via a CAPABILITIES_RES_MESSAGE packet with a capabilities… | |
| Modificada | Alta (9.3) | 5.5% | — | AsteriskAsterisk Appliance Developer KITAsterisknowAsterisk S800i Appliance | 18/7/2007 | 16/6/2026 | Stack-based buffer overflow in the IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to execute arbitrary code by sending a long (1) voice or… | |
| Modificada | Media (5) | 1.7% | — | AsteriskAsterisk Appliance Developer KITAsterisknowAsterisk S800i Appliance | 18/7/2007 | 16/6/2026 | The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted STUN length attribute in a STUN packet sent on an RTP port. | |
| Modificada | Media (5) | 32% | — | AsteriskAsterisk Appliance Developer KITAsterisknowAsterisk S800i Appliance | 18/7/2007 | 16/6/2026 | The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a certain data length value in a crafted… | |
| Modificada | Media (5) | 27% | — | AsteriskAsterisk Appliance Developer KITAsterisknowAsterisk S800i Appliance | 18/7/2007 | 16/6/2026 | The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2 allows remote attackers to cause a denial of service (crash) via a crafted (1) LAGRQ or (2) LAGRP frame that… |