https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T12:21:17.531930+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2013-avi-680 certa-2013-avi-680 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Asterisk</span>. Elles permettent à un attaquan… 2026-10-22T12:21:17.540782+00:00 certa-2013-avi-680 https://cve.radiocsirt.org/vuln/euvd-2026-108997 EUVD-2026-108997 2026-10-22T12:21:17.540870+00:00 EUVD-2026-108997 https://cve.radiocsirt.org/vuln/fkie_cve-2013-7100 fkie_cve-2013-7100 2026-10-22T12:21:17.540913+00:00

Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with Digiumphones 10.x-digiumphones before 10.12.4-digiumphones; and Certified Asterisk 1.8.x before 1.8.15-cert4 and 11.x before 11.2-cert3 allows remote attackers to cause a denial of service (daemon crash) via a 16-bit SMS message with an odd number of bytes, which triggers an infinite loop.

 https://cve.radiocsirt.org/vuln/ghsa-6wfw-q7f5-wr2c GHSA-6wfw-q7f5-wr2c 2026-10-22T12:21:17.540994+00:00

Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with Digiumphones 10.x-digiumphones before 10.12.4-digiumphones; and Certified Asterisk 1.8.x before 1.8.15-cert4 and 11.x before 11.2-cert3 allows remote attackers to cause a denial of service (daemon crash) via a 16-bit SMS message with an odd number of bytes, which triggers an infinite loop.

 https://cve.radiocsirt.org/vuln/gsd-2013-7100 gsd-2013-7100 2026-10-22T12:21:17.541018+00:00 gsd-2013-7100 https://cve.radiocsirt.org/vuln/ubuntu-cve-2013-7100 Withdrawn: UBUNTU-CVE-2013-7100 2026-10-22T12:21:17.541031+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: asterisk

Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with Digiumphones 10.x-digiumphones before 10.12.4-digiumphones; and Certified Asterisk 1.8.x before 1.8.15-cert4 and 11.x before 11.2-cert3 allows remote attackers to cause a denial of service (daemon crash) via a 16-bit SMS message with an odd number of bytes, which triggers an infinite loop.