Approved changes feed: RSS · Atom

cpe:2.3:a:digium:certified_asterisk:16.8:cert8:*:*:*:*:*:*

part: a version: 16.8 update: cert8

VendorDigium (05ad29b7-5b41-56d5-935d-a279ab7f14bc)
ProductCertified Asterisk (28acf01c-dbb1-5902-9616-b4c28682b220)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:asterisk/telephony/certified-asterisk purl2cpe 2026-06-01 10:15:42.008668
pkg:github/asterisk/asterisk purl2cpe 2026-06-01 10:15:42.008669

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26651 vulnerable 2026-06-08 05:41:52.761526 Details available
An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc module provides possibly inadequate escaping functionality for backslash characters in SQL queries, resulting in user-provided data creating a broken SQL query or possibly a SQL injection. This is fixed in 16.25.2, 18.11.2, and 19.3.2, and 16.8-cert14.
Published: 2022-04-15T00:00:00.000Z
Updated: 2024-08-03T05:11:43.391Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32558 vulnerable 2026-06-08 05:32:07.440502 Details available
An issue was discovered in Sangoma Asterisk 13.x before 13.38.3, 16.x before 16.19.1, 17.x before 17.9.4, and 18.x before 18.5.1, and Certified Asterisk before 16.8-cert10. If the IAX2 channel driver receives a packet that contains an unsupported media format, a crash can occur.
Published: 2021-07-27T05:19:34.000Z
Updated: 2024-08-03T23:25:30.855Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.