Lookup for vulnerable packages by Package URL.
| Purl | pkg:deb/debian/asterisk@1:1.8.13.1~dfsg-1?distro=sid |
|---|
| Type | deb |
|---|
| Namespace | debian |
|---|
| Name | asterisk |
|---|
| Version | 1:1.8.13.1~dfsg-1 |
|---|
| Qualifiers |
|
|---|
| Subpath | |
|---|
| Is_vulnerable | false |
|---|
| Next_non_vulnerable_version | 1:1.8.13.1~dfsg-2 |
|---|
| Latest_non_vulnerable_version | 1:22.9.0+dfsg+~cs6.16.60671434-1 |
|---|
| Affected_by_vulnerabilities |
|
|---|
| Fixing_vulnerabilities |
| 0 |
| url |
VCID-emr1-3t75-ekg4 |
| vulnerability_id |
VCID-emr1-3t75-ekg4 |
| summary |
channels/chan_sip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a provisional response to a SIP reINVITE request, which allows remote authenticated users to cause a denial of service (RTP port exhaustion) via sessions that lack final responses. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-3863
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-emr1-3t75-ekg4 |
|
| 1 |
| url |
VCID-j7sx-6dhs-wbff |
| vulnerability_id |
VCID-j7sx-6dhs-wbff |
| summary |
Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 allows remote authenticated users to execute arbitrary commands by leveraging originate privileges and providing an ExternalIVR value in an AMI Originate action. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-2186
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-j7sx-6dhs-wbff |
|
| 2 |
| url |
VCID-sh84-ms1c-efff |
| vulnerability_id |
VCID-sh84-ms1c-efff |
| summary |
channels/chan_iax2.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert7, Asterisk Digiumphones 10.x.x-digiumphones before 10.7.1-digiumphones, and Asterisk Business Edition C.3.x before C.3.7.6 does not enforce ACL rules during certain uses of peer credentials, which allows remote authenticated users to bypass intended outbound-call restrictions by leveraging the availability of these credentials. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-4737
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sh84-ms1c-efff |
|
| 3 |
| url |
VCID-whex-hbuj-97ge |
| vulnerability_id |
VCID-whex-hbuj-97ge |
| summary |
Double free vulnerability in apps/app_voicemail.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones allows remote authenticated users to cause a denial of service (daemon crash) by establishing multiple voicemail sessions and accessing both the Urgent mailbox and the INBOX mailbox. |
| references |
|
| fixed_packages |
|
| aliases |
CVE-2012-3812
|
| risk_score |
null |
| exploitability |
null |
| weighted_severity |
null |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-whex-hbuj-97ge |
|
|
|---|
| Risk_score | null |
|---|
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:deb/debian/asterisk@1:1.8.13.1~dfsg-1%3Fdistro=sid |
|---|