Digium, Inc. Asterisk

Name: Digium, Inc. Asterisk
Brand: Digium, Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical6high6medium0low

updated 2026-10-28

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-42365US	high8.8	4.70% (92nd)	Exploit	no fix	2024-08-08	3 versions
CVE-2023-49294US	high7.5	45.3% (99th)	—	no fix	2023-12-14	3 versions
CVE-2017-14100US	critical9.8	14.9% (97th)	—	no fix	2017-09-02	5 versions
CVE-2019-18976US	high7.5	12.8% (96th)	—	no fix	2019-11-22	13.0.0 → 13.29.1
CVE-2021-32558US	high7.5	9.22% (95th)	—	no fix	2021-07-30	13.23.0 rc1 → 18.5.0
CVE-2023-49786US	medium5.9	5.29% (93rd)	—	no fix	2023-12-14	3 versions
CVE-2016-2316US	medium5.9	4.95% (92nd)	—	no fix	2016-02-22	3 versions
CVE-2016-2232US	medium6.5	4.94% (92nd)	—	no fix	2016-02-22	4 versions
CVE-2021-31878US	medium6.5	2.46% (84th)	—	no fix	2021-07-30	2 versions
CVE-2021-32686US	medium5.9	2.07% (81st)	—	no fix	2021-07-23	4 versions
CVE-2023-37457US	high8.2	1.12% (66th)	—	no fix	2023-12-14	3 versions
CVE-2024-42491US	—	0.58% (48th)	—	no fix	2024-09-05	5 versions
CVE-2025-47779US	medium6.5	0.53% (45th)	—	no fix	2025-05-22	6 versions
CVE-2025-54995US	—	0.49% (42nd)	—	no fix	2025-08-28	≤ 18.26.4
CVE-2025-1131US	high7.8	0.22% (12th)	—	no fix	2025-09-23	6 versions

The flaw types (CWEs) most of these CVEs share.

CWE-476NULL Pointer Dereference3 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-1220Insufficient Granularity of Access Control1 CVEs
CWE-1286Improper Validation of Syntactic Correctness of Input1 CVEs
CWE-140Improper Neutralization of Delimiters1 CVEs
CWE-16CWE-161 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.