PatchTheCVEasterisk vulnerabilities
Recent CVEs affecting asterisk products. 1 tracked.
asterisk has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2024-08-08. Highest priority: CVE-2024-42365 (score 54/100).
- CVE-2024-42365 HIGH 7.4 UPGRADE DOWNGRADE Asterisk is an open source private branch exchange (PBX) and telephony toolkit
FAQ
How do I fix asterisk vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is asterisk being exploited right now?
None of the tracked asterisk CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which asterisk CVE should I patch first?
CVE-2024-42365 currently ranks highest (54/100): Asterisk is an open source private branch exchange (PBX) and telephony toolkit.