Opensource

Vendor:

First CVE: Dec 20, 2007 · Active for 18 years

22
Total CVEs
Bottom 1%
3.7
Avg CVEs / Year
Bottom 1%
6.0
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Opensource over time

Volume of CVEsAvg CVSS Base Score
First CVE
Dec 20, 2007
18 years ago
Most Recent CVE
Apr 1, 2013
4,862 days ago

CVE Severity & Scoring

Opensource22 CVEs
All CVEs352,294 CVEs
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown22 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown22 (100.0%)
User Interaction
None0 (0.0%)
Unknown22 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown22 (100.0%)

Top CVEs

Signals from CVEs in this product scope (22 CVEs).

22 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2008-0095MEDIUM
The SIP channel driver in Asterisk Open Source 1.4.x before 1.4.17, Business Edition before C.1.0-beta8, AsteriskNOW before beta7, Appliance Developer Kit before Asterisk 1.4 revis
Jan 8, 20085.038NOYES
CVE-2008-1289HIGH
Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0
Mar 24, 20087.533NOYES
CVE-2012-2186HIGH
Incomplete blacklist vulnerability in main/manager.c in Asterisk Open Source 1.8.x before 1.8.15.1 and 10.x before 10.7.1, Certified Asterisk 1.8.11 before 1.8.11-cert6, Asterisk D
Aug 31, 20129.027NONO
CVE-2008-1332HIGH
Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2;
Mar 20, 20088.826NONO
CVE-2013-2685HIGH
Stack-based buffer overflow in res/res_format_attr_h264.c in Asterisk Open Source 11.x before 11.2.2 allows remote attackers to execute arbitrary code via a long sprop-parameter-se
Apr 1, 20137.524NONO
CVE-2008-2119MEDIUM
Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing (aka pedanticsipchecking) is enabled, allows remote at
Jun 4, 20084.323NOYES
CVE-2012-2414MEDIUM
main/manager.c in the Manager Interface in Asterisk Open Source 1.6.2.x before 1.6.2.24, 1.8.x before 1.8.11.1, and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.
Apr 30, 20126.522NONO
CVE-2011-4063MEDIUM
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.7.1 and 10.x before 10.0.0-rc1 does not properly initialize variables during request parsing, which al
Oct 21, 20116.822NONO
CVE-2009-2346HIGH
The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x bef
Sep 8, 20097.822NONO
CVE-2012-2416MEDIUM
chan_sip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid opt
Apr 30, 20126.521NONO
View all 22 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (22 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
13.6% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (22 CVEs).

Media Mentions

Signals from CVEs in this product scope (22 CVEs).

Top CNAs Publishing CVEs For Opensource

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
1.8.9.366.42.4%00
1.8.9.266.42.4%00
1.8.9.166.42.4%00
1.8.9.076.12.4%00
1.8.8.266.42.4%00
1.8.8.176.12.4%00
1.8.8.085.82.4%00
1.8.7.276.12.4%00
1.8.7.176.12.4%00
1.8.7.085.82.4%00
1.8.727.93.0%00
1.8.6.085.82.4%00
1.8.5.085.82.4%00
1.8.585.82.4%00
1.8.4.476.12.4%00
1.8.4.376.12.4%00
1.8.4.276.12.4%00
1.8.4.176.12.4%00
1.8.476.12.4%00
1.8.3.376.12.4%00