CVE catalog

CVE-2019-18610

asterisk - security update

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
50.08% · Oct 25, 2026

An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianasterisk140.1.11-3vulnerable
Debianasterisk140.1.11-3woody1vulnerable
Debianasterisk141:1.0.5-2vulnerable
Debianasterisk141:1.0.5-4vulnerable
Debianasterisk141:1.0.6-1vulnerable
Debianasterisk141:1.0.6-2vulnerable
Debianasterisk141:1.0.7-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge3vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge4vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge5vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge6vulnerable
Debianasterisk141:1.0.9.dfsg-1vulnerable
Debianasterisk141:1.0.9.dfsg-3vulnerable
Debianasterisk141:1.0.9.dfsg-4vulnerable
Debianasterisk141:1.0.9.dfsg-5vulnerable
Debianasterisk141:1.0.9.dfsg-6vulnerable
Debianasterisk141:1.2.0-beta1.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-2vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-3vulnerable
Debianasterisk141:1.2.0-rc1.dfsg-1vulnerable
Debianasterisk141:1.2.0-rc2.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-2vulnerable
Debianasterisk141:1.2.0.dfsg-3vulnerable
Debianasterisk141:1.2.0.dfsg-4vulnerable
Debianasterisk141:1.2.0.dfsg-5vulnerable
Debianasterisk141:1.2.0.dfsg-6vulnerable
Debianasterisk141:1.2.1.dfsg-1vulnerable
Debianasterisk141:1.2.1.dfsg-2vulnerable
Debianasterisk141:1.2.1.dfsg-3vulnerable
Debianasterisk141:1.2.10.dfsg-1vulnerable
Debianasterisk141:1.2.10.dfsg-1bpo1vulnerable
Debianasterisk141:1.2.10.dfsg-2vulnerable
Debianasterisk141:1.2.10.dfsg-3vulnerable
Debianasterisk141:1.2.11.dfsg-1vulnerable
Debianasterisk141:1.2.12.1.dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch1vulnerable
Debianasterisk141:1.2.13~dfsg-2etch2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch3vulnerable
Debianasterisk141:1.2.13~dfsg-2etch4vulnerable
Debianasterisk141:1.2.14~dfsg-1vulnerable
Debianasterisk141:1.2.14~dfsg-2vulnerable
Debianasterisk141:1.2.14~dfsg-3vulnerable
Debianasterisk141:1.2.14~dfsg-4vulnerable
Debianasterisk141:1.2.15~dfsg-1vulnerable
Debianasterisk141:1.2.16~dfsg-1vulnerable
Debianasterisk141:1.2.17~dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-2vulnerable
Debianasterisk141:1.2.4.dfsg-3vulnerable
Debianasterisk141:1.2.4.dfsg-4vulnerable
Debianasterisk141:1.2.4.dfsg-5vulnerable
Debianasterisk141:1.2.4.dfsg-6vulnerable
Debianasterisk141:1.2.4.dfsg-6+b1vulnerable
Debianasterisk141:1.2.4.dfsg-7vulnerable
Debianasterisk141:1.2.7.1.dfsg-1vulnerable
Debianasterisk141:1.2.7.1.dfsg-2vulnerable
Debianasterisk141:1.2.7.1.dfsg-3vulnerable
Debianasterisk141:1.2.9.1.dfsg-1vulnerable
Debianasterisk141:1.4.10~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-2vulnerable
Debianasterisk141:1.4.11~dfsg-3vulnerable
Debianasterisk141:1.4.11~dfsg-4vulnerable
Debianasterisk141:1.4.13~dfsg-1vulnerable
Debianasterisk141:1.4.15~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-2vulnerable
Debianasterisk141:1.4.17~dfsg-1vulnerable
Debianasterisk141:1.4.17~dfsg-2vulnerable
Debianasterisk141:1.4.18.1~dfsg-1vulnerable
Debianasterisk141:1.4.18~dfsg-1vulnerable
Debianasterisk141:1.4.19.1~dfsg-1vulnerable
Debianasterisk141:1.4.20~dfsg-1vulnerable
Debianasterisk141:1.4.21.1~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2.1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny5vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny6vulnerable
Debianasterisk141:1.4.21.2~dfsg-3.1vulnerable
Debianasterisk141:1.4.2~dfsg-1vulnerable
Debianasterisk141:1.4.2~dfsg-2vulnerable
Debianasterisk141:1.4.2~dfsg-3vulnerable
Debianasterisk141:1.4.2~dfsg-4vulnerable
Debianasterisk141:1.4.2~dfsg-5vulnerable
Debianasterisk141:1.4.3~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-2vulnerable
Debianasterisk141:1.4.4~dfsg-3vulnerable
Debianasterisk141:1.4.5~dfsg-1vulnerable
Debianasterisk141:1.4.6~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-2vulnerable
Debianasterisk141:1.4.9~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg~rc3-1vulnerable
Debianasterisk141:1.6.2.0-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~beta3-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~rc1-1vulnerable
Debianasterisk141:1.6.2.0~rc3-1vulnerable
Debianasterisk141:1.6.2.0~rc3-2vulnerable
Debianasterisk141:1.6.2.0~rc6-1vulnerable
Debianasterisk141:1.6.2.0~rc7-1vulnerable
Debianasterisk141:1.6.2.2-1vulnerable
Debianasterisk141:1.6.2.6-1vulnerable
Debianasterisk141:1.6.2.7-1vulnerable
Debianasterisk141:1.6.2.9-1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+2vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+3vulnerable
Debianasterisk141:1.6.2.9-2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze1vulnerable
Debianasterisk141:1.6.2.9-2+squeeze10vulnerable
Debianasterisk141:1.6.2.9-2+squeeze11vulnerable
Debianasterisk141:1.6.2.9-2+squeeze12vulnerable
Debianasterisk141:1.6.2.9-2+squeeze2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze3vulnerable
Debianasterisk141:1.6.2.9-2+squeeze4vulnerable
Debianasterisk141:1.6.2.9-2+squeeze5vulnerable
Debianasterisk141:1.6.2.9-2+squeeze6vulnerable
Debianasterisk141:1.6.2.9-2+squeeze7vulnerable
Debianasterisk141:1.6.2.9-2+squeeze8vulnerable
Debianasterisk141:1.6.2.9-2+squeeze9vulnerable
Debianasterisk141:1.8.10.0~dfsg-1vulnerable
Debianasterisk141:1.8.10.1~dfsg-1vulnerable
Debianasterisk141:1.8.11.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1+powerpcspe1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-2vulnerable
Debianasterisk141:1.8.13.1~dfsg-3vulnerable
Debianasterisk141:1.8.3.3-1vulnerable
Debianasterisk141:1.8.4-1vulnerable
Debianasterisk141:1.8.4.2-1vulnerable
Debianasterisk141:1.8.4.3-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-1vulnerable
Debianasterisk141:1.8.7.1~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-3vulnerable
Debianasterisk141:1.8.8.0~dfsg-1vulnerable
Debianasterisk141:1.8.8.2~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.10.2~dfsg-1vulnerable
Debianasterisk141:11.10.2~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-1vulnerable
Debianasterisk141:11.11.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-2vulnerable
Debianasterisk141:11.12.0~dfsg-1vulnerable
Debianasterisk141:11.12.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.12.1~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.13.1~dfsg-1vulnerable
Debianasterisk141:11.13.1~dfsg-2vulnerable
Debianasterisk141:11.13.1~dfsg-2~bpo70+1vulnerable
Debianasterisk141:11.5.1~dfsg-1vulnerable
Debianasterisk141:11.5.1~dfsg-2vulnerable
Debianasterisk141:11.5.1~dfsg1-1vulnerable
Debianasterisk141:11.5.1~dfsg1-1~bpo70+1vulnerable
Debianasterisk141:11.6.0~dfsg-1vulnerable
Debianasterisk141:11.6.0~dfsg-2vulnerable
Debianasterisk141:11.6.0~dfsg-3vulnerable
Debianasterisk141:11.7.0~dfsg-1vulnerable
Debianasterisk141:11.7.0~dfsg-1+e1vulnerable
Debianasterisk141:11.7.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.8.0~dfsg-1vulnerable
Debianasterisk141:11.8.0~dfsg-2vulnerable
Debianasterisk141:11.8.1~dfsg-1vulnerable
Debianasterisk141:11.8.1~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.9.0~dfsg-1vulnerable
Debianasterisk141:11.9.0~dfsg-2vulnerable
Debianasterisk141:11.9.0~dfsg-2~bpo70+1vulnerable
Debianasterisk141:13.0.0~dfsg-1vulnerable
Debianasterisk141:13.0.0~dfsg-2vulnerable
Debianasterisk141:13.1.0~dfsg-1vulnerable
Debianasterisk141:13.1.0~dfsg-1.1vulnerable
Debianasterisk141:13.10.0~dfsg-1vulnerable
Debianasterisk141:13.11.2~dfsg-1vulnerable
Debianasterisk141:13.12.1~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-1vulnerable
Debianasterisk141:13.13.1~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-3vulnerable
Debianasterisk141:13.13.1~dfsg-3~exp1vulnerable
Debianasterisk141:13.13.1~dfsg-4vulnerable
Debianasterisk141:13.14.0~dfsg-1vulnerable
Debianasterisk141:13.14.0~dfsg-1~exp1vulnerable
Debianasterisk141:13.14.1~dfsg-1vulnerable
Debianasterisk141:13.14.1~dfsg-2vulnerable
Debianasterisk141:13.17.0~dfsg-1vulnerable
Debianasterisk141:13.17.0~dfsg-2vulnerable
Debianasterisk141:13.17.1~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-2vulnerable
Debianasterisk141:13.18.1~dfsg-1vulnerable
Debianasterisk141:13.18.3~dfsg-1vulnerable
Debianasterisk141:13.18.5~dfsg-1vulnerable
Debianasterisk141:13.20.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-2vulnerable
Debianasterisk141:13.23.1~dfsg-1vulnerable
Debianasterisk141:13.23.1~dfsg-2vulnerable
Debianasterisk141:13.7.2~dfsg-1vulnerable
Debianasterisk141:13.8.0~dfsg-1vulnerable
Debianasterisk141:13.8.2~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-1vulnerable
Debianasterisk141:16.1.0~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-3vulnerable
Debianasterisk141:16.1.0~dfsg-4vulnerable
Debianasterisk141:16.1.1~dfsg-1vulnerable
Debianasterisk141:16.2.0~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-2vulnerable
Debianasterisk141:16.10.0~dfsg-1fixed
Alpineasterisk3.1016.3.0-r3fixed
Alpineasterisk3.1116.6.2-r0fixed
Alpineasterisk3.1216.6.2-r0fixed
Alpineasterisk3.1316.6.2-r0fixed
Alpineasterisk3.1416.6.2-r0fixed
Alpineasterisk3.1516.6.2-r0fixed
Alpineasterisk3.1616.6.2-r0fixed
Alpineasterisk3.1716.6.2-r0fixed
Alpineasterisk3.1816.6.2-r0fixed
Alpineasterisk3.1916.6.2-r0fixed
Alpineasterisk3.2016.6.2-r0fixed
Alpineasterisk3.2116.6.2-r0fixed
Alpineasterisk3.2216.6.2-r0fixed
Alpineasterisk3.2316.6.2-r0fixed
Alpineasterisk3.2416.6.2-r0fixed
Ubuntuasteriskpro1:13.1.0~dfsg-1.1ubuntu3vulnerable
Ubuntuasteriskpro1:13.1.0~dfsg-1.1ubuntu4vulnerable
Ubuntuasteriskpro1:13.1.0~dfsg-1.1ubuntu4.1vulnerable
Ubuntuasteriskpro1:13.1.0~dfsg-1.1ubuntu4.1+esm1vulnerable
Ubuntuasterisk18.041:13.17.2~dfsg-1ubuntu1vulnerable
Ubuntuasterisk18.041:13.17.2~dfsg-2ubuntu1vulnerable
Ubuntuasterisk18.041:13.18.1~dfsg-1ubuntu1vulnerable
Ubuntuasterisk18.041:13.18.3~dfsg-1ubuntu1vulnerable
Ubuntuasterisk18.041:13.18.3~dfsg-1ubuntu2vulnerable
Ubuntuasterisk18.041:13.18.3~dfsg-1ubuntu3vulnerable
Ubuntuasterisk18.041:13.18.3~dfsg-1ubuntu4vulnerable
Ubuntuasterisk20.041:16.2.1~dfsg-2build2vulnerable
Ubuntuasterisk20.041:16.2.1~dfsg-2build3vulnerable
Ubuntuasterisk20.041:16.2.1~dfsg-2ubuntu1vulnerable
Debianasterisk81:11.13.1~dfsg-2vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u1vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u2vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u3vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u4vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u5vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u6vulnerable
Debianasterisk81:11.13.1~dfsg-2+deb8u7fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianasteriskdeb141:16.10.0~dfsg-1Not reportedDEBIAN-CVE-2019-18610Not reported
Alpineasteriskapk3.1016.3.0-r3Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.1116.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.1216.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.1316.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.1416.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.1516.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.1616.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.1716.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.1816.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.1916.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.2016.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.2116.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.2216.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.2316.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Alpineasteriskapk3.2416.6.2-r0Not reportedALPINE-CVE-2019-18610Not reported
Debianasteriskdeb81:11.13.1~dfsg-2+deb8u7Not reportedDLA-2017-1Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References