Back to Database
Status published
Unknown
CVE-2022-37325
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0,...
Vulnerability Description
In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a crash.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-37325
Credits & Attribution
No credits recorded in the NVD database.
References
More from sangoma
View All →CVE-2022-42706
An issue was discovered in Sangoma Asterisk through 16.28, 17...
Unknown
0
CVE-2022-42705
A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6,...
Unknown
0
CVE-2021-45461
FreePBX, when restapps (aka Rest Phone Apps) 15.0.19.87, 15.0.19.88, 16.0.18.40,...
Critical
9.8
CVE-2021-45310
Sangoma Technologies Corporation Switchvox Version 102409 is affected by an...
Medium
5.3
CVE-2020-10666
The restapps (aka Rest Phone apps) module for Sangoma FreePBX...
Critical
9.8
Affected Vendor
sangoma
View all reports →Affected Software
asterisk
Vulnerable Versions:
16.0.0, 18.0.0, 19.0.0, 20.0.0
Timeline
Official Publish:
December 5th, 2022
Last Modified:
July 2nd, 2026
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.