The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 8dd438ed-a338-11ed-b48b-589cfc0f81b0 advisory.

  - In Sangoma Asterisk through 16.28.0, 17.x and 18.x through 18.14.0, and 19.x through 19.6.0, an incoming     Setup message to addons/ooh323c/src/ooq931.c with a malformed Calling or Called Party IE can cause a     crash. (CVE-2022-37325)

  - A use-after-free in res_pjsip_pubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2     may allow a remote authenticated attacker to crash Asterisk (denial of service) by performing activity on     a subscription via a reliable transport at the same time that Asterisk is also performing activity on that     subscription. (CVE-2022-42705)

  - An issue was discovered in Sangoma Asterisk through 16.28, 17 and 18 through 18.14, 19 through 19.6, and     certified through 18.9-cert1. GetConfig, via Asterisk Manager Interface, allows a connected application to     access files outside of the asterisk configuration directory, aka Directory Traversal. (CVE-2022-42706)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

FreeBSD : sterisk -- multiple vulnerabilities (8dd438ed-a338-11ed-b48b-589cfc0f81b0)

medium Nessus Plugin ID 170965

Version 1.0