# Digium Asterisk


- [CVE-2022-26651](https://insights.sbomify.com/CVE-2022-26651/): SQL injection in n/a (critical 9.8)
- [CVE-2017-14100](https://insights.sbomify.com/CVE-2017-14100/): Command injection in n/a (critical 9.8)
- [CVE-2022-26499](https://insights.sbomify.com/CVE-2022-26499/): Server-side request forgery in n/a (critical 9.1)
- [CVE-2014-8418](https://insights.sbomify.com/CVE-2014-8418/): Privilege escalation in n/a (critical 9.0)
- [CVE-2011-1599](https://insights.sbomify.com/CVE-2011-1599/): Missing authorization in n/a (critical 9.0)
- [CVE-2019-18610](https://insights.sbomify.com/CVE-2019-18610/): Command injection in n/a (high 8.8)
- [CVE-2017-16671](https://insights.sbomify.com/CVE-2017-16671/): Memory corruption in n/a (high 8.8)
- [CVE-2017-7617](https://insights.sbomify.com/CVE-2017-7617/): Memory corruption in n/a (high 8.8)
- [CVE-2009-2726](https://insights.sbomify.com/CVE-2009-2726/): Denial of service in n/a (high 7.8)
- [CVE-2007-1306](https://insights.sbomify.com/CVE-2007-1306/): Null dereference in n/a (high 7.8)
- [CVE-2006-5445](https://insights.sbomify.com/CVE-2006-5445/): Denial of service in n/a (high 7.8)
- [CVE-2023-37457](https://insights.sbomify.com/CVE-2023-37457/): Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update' (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/products/digium/asterisk/