Vulnerabilities > Digium > Asterisk > 13.18.0

DATE CVE VULNERABILITY TITLE RISK
2017-11-09 CVE-2017-16672 Missing Release of Resource after Effective Lifetime vulnerability in Digium Asterisk and Certified Asterisk
An issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7.
network
digium CWE-772
4.3
2017-11-09 CVE-2017-16671 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Digium Asterisk and Certified Asterisk
A Buffer Overflow issue was discovered in Asterisk Open Source 13 before 13.18.1, 14 before 14.7.1, and 15 before 15.1.1 and Certified Asterisk 13.13 before 13.13-cert7.
network
low complexity
digium CWE-119
6.5