VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 15, 2022· Updated Jun 17, 2026

CVE-2022-26651

CVE-2022-26651

Description

An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc module provides possibly inadequate escaping functionality for backslash characters in SQL queries, resulting in user-provided data creating a broken SQL query or possibly a SQL injection. This is fixed in 16.25.2, 18.11.2, and 19.3.2, and 16.8-cert14.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

26
  • Digium/Asterisk
    cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*
    Range: >=16.0.0,<16.25.2
  • Digium/Certified Asterisk21 versions
    cpe:2.3:a:digium:certified_asterisk:16.8:-:*:*:*:*:*:*+ 20 more
    • cpe:2.3:a:digium:certified_asterisk:16.8:-:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert10:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert11:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert12:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert13:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert2:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert3:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc1:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc2:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc3:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc4:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert4:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert5:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert6:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert7:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert8:*:*:*:*:*:*
    • cpe:2.3:a:digium:certified_asterisk:16.8:cert9:*:*:*:*:*:*
  • Debian/linux2 versions
    cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
    • cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
  • Asterisk/func_odbcllm-create
  • Asterisk/Asteriskllm-fuzzy

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.