BSD PortsVulnerable: version 11.22.0 is affected by 20 known vulnerabilities. See below.
wip/asterisk11-vicidial 11.22.0 NetBSD
The Asterisk Software PBX
- System
- NetBSD
- Repository
- pkgsrc-wip
- Maintainer
- [email protected]
- License
- gnu-gpl-v2
- Categories
- wip, comms, net, audio
Description
Asterisk is a complete PBX in software. It provides all of the features you would expect from a PBX and more. Asterisk does voice over IP in three protocols, and can interoperate with almost all standards-based telephony equipment using relatively inexpensive hardware.
VICIDIAL is a software suite that is designed to interact with the Asterisk Open-Source PBX Phone system to act as a complete inbound/outbound contact center suite with inbound email support as well.
This is a modified version of Asterisk 11 for Vicidial.
Install
From pkgsrc-wip (no binary package):
cd /usr/pkgsrc/wip/asterisk11-vicidial && make install cleanDependency graph
Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.
Dependencies
Run dependencies 7
No port depends on this one.
Known vulnerabilities 20
- asterisk: denial-of-service
- asterisk: authentication-bypass
- asterisk: denial-of-service
- asterisk: eol
- asterisk: eol
- asterisk: eol
- asterisk: eol
- asterisk: authentication-bypass
- asterisk: information-disclosure (CVE-2017-14099)
- asterisk: arbitrary-command-execution (CVE-2017-14100)
- asterisk: information-disclosure (CVE-2017-14603)
- asterisk: remote-denial-of-service (CVE-2020-35776)
- asterisk: remote-denial-of-service (CVE-2021-26712)
- asterisk: remote-denial-of-service (CVE-2021-26906)
- asterisk: buffer-overflow (CVE-2023-37457)
- asterisk: path-traversal (CVE-2023-49294)
- asterisk: denial-of-service (CVE-2023-49786)
- asterisk: improper-authentication (CVE-2024-35190)
- asterisk: privilege-escalation (CVE-2024-42365)
- asterisk: denial-of-service (CVE-2024-42491)