asterisk asterisk

Name: asterisk asterisk
Brand: asterisk

productUS

cpe:2.3:a:asterisk:asterisk:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical13high6medium1low

updated 2026-10-28

vulnerabilities (20)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2007-3764US	medium5.0	31.5% (98th)	Exploit	no fix	2007-07-18	31 versions
CVE-2008-3263US	high7.8	28.0% (98th)	Exploit	no fix	2008-07-22	103 versions
CVE-2007-3763US	medium5.0	26.6% (98th)	Exploit	no fix	2007-07-18	31 versions
CVE-2007-2293US	high7.6	23.9% (98th)	Exploit	no fix	2007-04-26	3 versions
CVE-2007-1561US	high7.8	14.9% (97th)	Exploit	no fix	2007-03-21	4 versions
CVE-2024-42365US	high8.8	4.70% (92nd)	Exploit	18.24.2	2024-08-08	3 versions
CVE-2007-3762US	high9.3	5.51% (93rd)	—	no fix	2007-07-18	31 versions
CVE-2007-2488US	high10.0	4.32% (91st)	—	no fix	2007-05-07	≤ 1.4.4_2007-04-27
CVE-2007-2294US	high7.8	3.86% (90th)	—	no fix	2007-04-26	18 versions
CVE-2008-1390US	high9.3	3.84% (90th)	—	no fix	2008-03-24	21 versions
CVE-2010-0441US	medium5.0	3.38% (89th)	—	no fix	2010-02-04	53 versions
CVE-2007-4521US	medium5.0	3.00% (87th)	—	no fix	2007-08-28	7 versions
CVE-2007-1594US	high7.8	2.70% (86th)	—	no fix	2007-03-22	37 versions
CVE-2007-1595US	high7.5	2.69% (86th)	—	no fix	2007-03-22	= 1.2.13
CVE-2009-2346US	high7.8	2.58% (85th)	—	no fix	2009-09-08	31 versions
CVE-2007-2297US	high7.8	2.39% (84th)	—	no fix	2007-04-26	13 versions
CVE-2008-1332US	high8.8	2.33% (83rd)	—	no fix	2008-03-20	15 versions
CVE-2007-4455US	medium5.0	1.77% (78th)	—	no fix	2007-08-22	≤ 1.4.9
CVE-2007-3765US	medium5.0	1.69% (77th)	—	no fix	2007-07-18	31 versions
CVE-2007-4280US	low3.5	1.15% (67th)	—	no fix	2007-08-09	≤ 1.4.9

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation11 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-122Heap-based Buffer Overflow2 CVEs
CWE-264CWE-2642 CVEs
CWE-476NULL Pointer Dereference2 CVEs
CWE-1220Insufficient Granularity of Access Control1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.