Vulnerabilities > Digium > Asterisk > 15.1.4

DATE CVE VULNERABILITY TITLE RISK
2018-02-22 CVE-2018-7287 Improper Check for Unusual or Exceptional Conditions vulnerability in Digium Asterisk
An issue was discovered in res_http_websocket.c in Asterisk 15.x through 15.2.1.
network
digium CWE-754
4.3
2018-02-22 CVE-2018-7286 An issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2.
network
low complexity
digium debian
4.0
2018-02-22 CVE-2018-7285 NULL Pointer Dereference vulnerability in Digium Asterisk
A NULL pointer access issue was discovered in Asterisk 15.x through 15.2.1.
network
low complexity
digium CWE-476
5.0
2018-02-22 CVE-2018-7284 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Digium Asterisk
A Buffer Overflow issue was discovered in Asterisk through 13.19.1, 14.x through 14.7.5, and 15.x through 15.2.1, and Certified Asterisk through 13.18-cert2.
network
low complexity
digium debian CWE-119
5.0
2017-12-27 CVE-2017-17850 Improper Input Validation vulnerability in Digium Asterisk and Certified Asterisk
An issue was discovered in Asterisk 13.18.4 and older, 14.7.4 and older, 15.1.4 and older, and 13.18-cert1 and older.
network
low complexity
digium CWE-20
5.0