Vulnerabilities > Digium > Asterisk > 11.21.2
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2016-12-12 | CVE-2016-9938 | Improper Authorization vulnerability in Digium Asterisk and Certified Asterisk An issue was discovered in Asterisk Open Source 11.x before 11.25.1, 13.x before 13.13.1, and 14.x before 14.2.1 and Certified Asterisk 11.x before 11.6-cert16 and 13.x before 13.8-cert4. | 5.0 |
2014-06-17 | CVE-2014-4048 | Denial of Service vulnerability in Asterisk PJSIP Channel Driver The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service (deadlock) by terminating a subscription request before it is complete, which triggers a SIP transaction timeout. network digium | 4.3 |