Lucene search
FreeBSD8DD438ED-A338-11ED-B48B-589CFC0F81B0HistoryDec 01, 2022 - 12:00 a.m.
Asterisk -- multiple vulnerabilities
2022-12-0100:00:00
vuxml.freebsd.org
12
asterisk
vulnerabilities
remote crash
use after free
h323
res_pjsip_pubsub.c
getconfig
ami action
unix
file access
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.004
Percentile
74.4%
The Asterisk project reports:
AST-2022-007: Remote Crash Vulnerability in H323 channel add on
AST-2022-008: Use after free in res_pjsip_pubsub.c
AST-2022-009: GetConfig AMI Action can read files outside of
Asterisk directory
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| FreeBSD | any | noarch | asterisk18 | < 18.15.1 | UNKNOWN |
Related
nessus
nessus
FreeBSD : Asterisk -- multiple vulnerabilities (8dd438ed-a338-11ed-b48b-589cfc0f81b0)
2023-02-02 00:00:00
Debian DLA-3335-1 : asterisk - LTS security update
2023-02-24 00:00:00
Debian DSA-5358-1 : asterisk - security update
2023-02-24 00:00:00
openvas
openvas
Asterisk Multiple Vulnerabilities (AST-2022-007, AST-2022-008, AST-2022-009)
2022-12-02 00:00:00
Debian: Security Advisory (DSA-5358-1)
2023-02-24 00:00:00
Debian: Security Advisory (DLA-3335-1)
2023-02-23 00:00:00
osv
osv
asterisk - security update
2023-02-23 00:00:00
asterisk - security update
2023-02-22 00:00:00
CVE-2022-42705
2022-12-05 21:15:10
debian
debian
[SECURITY] [DLA 3335-1] asterisk security update
2023-02-22 22:36:41
[SECURITY] [DSA 5358-1] asterisk security update
2023-02-23 09:14:43
veracode
veracode
Denial Of Service (DoS)
2022-12-13 12:22:58
Path Traversal
2022-12-13 23:44:07
Denial Of Service (DoS)
2022-12-13 23:44:04
alpinelinux
alpinelinux
cvelist
cvelist
ubuntucve
ubuntucve
prion
prion
Design/Logic Flaw
2022-12-05 21:15:00
Directory traversal
2022-12-05 21:15:00
Code injection
2022-12-05 21:15:00
debiancve
debiancve
nvd
nvd
cve
cve
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.004
Percentile
74.4%
Related for 8DD438ED-A338-11ED-B48B-589CFC0F81B0