https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-49786.htmlhttps://patchthecve.com/cve/CVE-2023-49786.htmlWed, 17 Jun 2026 06:36:27 +0000HIGH 7.5: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1; as well as certified-asterisk prior to 18.9-cert6; Asterisk is susceptible to a DoS due to a race condition in the hello handshake phase of the DTLS protocol when handhttps://patchthecve.com/cve/CVE-2023-49294.htmlhttps://patchthecve.com/cve/CVE-2023-49294.htmlWed, 17 Jun 2026 06:35:47 +0000MEDIUM 4.9: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the `live_dangerously` is not enabled. This allows arbitrary filhttps://patchthecve.com/cve/CVE-2023-37457.htmlhttps://patchthecve.com/cve/CVE-2023-37457.htmlWed, 17 Jun 2026 06:08:15 +0000HIGH 7.5: Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0 and prior, and 21.0.0; as well as ceritifed-asterisk 18.9-cert5 and prior, the 'update' functionality of the PJSIP_HEADER dialplan function can exceed the available buffer space f