https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:05:29 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0739 certfr-2025-avi-0739 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0739 https://cve.radiocsirt.org/vuln/euvd-2026-251306 EUVD-2026-251306 https://cve.radiocsirt.org/vuln/euvd-2026-251306 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57767 <p>Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn&#39;t in a previous 401 response&#39;s WWW-Authenticate header, or an Authorization header with an incorrect realm was received without a previous 401 response being sent, the get_authorization_header() function in res_pjsip_authenticator_digest will return a NULL. This wasn&#39;t being checked before attempting to get the digest algorithm from the header which causes a SEGV. This issue has been patched in versions 20.15.2, 21.10.2, and 22.5.2. There are no workarounds.</p> <p>Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn&#39;t in a previous 401 response&#39;s WWW-Authenticate header, or an Authorization header with an incorrect realm was received without a previous 401 response being sent, the get_authorization_header() function in res_pjsip_authenticator_digest will return a NULL. This wasn&#39;t being checked before attempting to get the digest algorithm from the header which causes a SEGV. This issue has been patched in versions 20.15.2, 21.10.2, and 22.5.2. There are no workarounds.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-57767 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-57767 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: asterisk, Ubuntu:18.04:LTS: asterisk, Ubuntu:20.04:LTS: asterisk, Ubuntu:22.04:LTS: asterisk, Ubuntu:24.04:LTS: asterisk, Ubuntu:25.10: asterisk, Ubuntu:26.04:LTS: asterisk</p> <p>Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn&#39;t in a previous 401 response&#39;s WWW-Authenticate header, or an Authorization header with an incorrect realm was received without a previous 401 response being sent, the get_authorization_header() function in res_pjsip_authenticator_digest will return a NULL. This wasn&#39;t being checked before attempting to get the digest algorithm from the header which causes a SEGV. This issue has been patched in versions 20.15.2, 21.10.2, and 22.5.2. There are no workarounds.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: asterisk, Ubuntu:18.04:LTS: asterisk, Ubuntu:20.04:LTS: asterisk, Ubuntu:22.04:LTS: asterisk, Ubuntu:24.04:LTS: asterisk, Ubuntu:25.10: asterisk, Ubuntu:26.04:LTS: asterisk</p> <p>Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.15.2, 21.10.2, and 22.5.2, if a SIP request is received with an Authorization header that contains a realm that wasn&#39;t in a previous 401 response&#39;s WWW-Authenticate header, or an Authorization header with an incorrect realm was received without a previous 401 response being sent, the get_authorization_header() function in res_pjsip_authenticator_digest will return a NULL. This wasn&#39;t being checked before attempting to get the digest algorithm from the header which causes a SEGV. This issue has been patched in versions 20.15.2, 21.10.2, and 22.5.2. There are no workarounds.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-57767 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1926 <p>Ein Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1926