CVE-2022-26651

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-26651
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-26651.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-26651
Downstream
Published
2022-04-15T00:00:00Z
Modified
2026-06-26T03:54:12.182009735Z
Summary
[none]
Details

An issue was discovered in Asterisk through 19.x and Certified Asterisk through 16.8-cert13. The func_odbc module provides possibly inadequate escaping functionality for backslash characters in SQL queries, resulting in user-provided data creating a broken SQL query or possibly a SQL injection. This is fixed in 16.25.2, 18.11.2, and 19.3.2, and 16.8-cert14.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "DESCRIPTION",
            "extracted_events": [
                {
                    "fixed": "19.x"
                },
                {
                    "fixed": "16.8-cert13"
                }
            ]
        }
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/26xxx/CVE-2022-26651.json",
    "cna_assigner": "mitre"
}
References

Affected packages

Git / github.com/asterisk/asterisk

Affected ranges

Type
GIT
Repo
https://github.com/asterisk/asterisk
Events
Introduced
a65908f83e2f17a3aca7eb39c8e06045aca02674
Fixed
8898781851e446bd6eebb74592d8005e0511f1e1
Introduced
2c1bba3cbec008c8ce35c78a2c79f9f207ea58bc
Fixed
3e57d107467db7b5e4b64db75edf09641881c9fd
Introduced
de4f63b4824c91a0cd9f3d95f3b7923bec71960c
Fixed
91be429a41b9a9090e7e2b7b1efc9bea61571292
Introduced
0 Unknown introduced commit / All previous commits are affected
Database specific 
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "extracted_events": [
        {
            "introduced": "16.0.0"
        },
        {
            "fixed": "16.25.2"
        },
        {
            "introduced": "18.0"
        },
        {
            "fixed": "18.11.2"
        },
        {
            "introduced": "19.0.0"
        },
        {
            "fixed": "19.3.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "16.8-NA"
        },
        {
            "last_affected": "16.8-cert1\\-rc1"
        },
        {
            "last_affected": "16.8-cert1\\-rc2"
        },
        {
            "last_affected": "16.8-cert1\\-rc3"
        },
        {
            "last_affected": "16.8-cert1\\-rc4"
        },
        {
            "last_affected": "16.8-cert10"
        },
        {
            "last_affected": "16.8-cert11"
        },
        {
            "last_affected": "16.8-cert12"
        },
        {
            "last_affected": "16.8-cert13"
        },
        {
            "last_affected": "16.8-cert2"
        },
        {
            "last_affected": "16.8-cert3"
        },
        {
            "last_affected": "16.8-cert4"
        },
        {
            "last_affected": "16.8-cert4\\-rc1"
        },
        {
            "last_affected": "16.8-cert4\\-rc2"
        },
        {
            "last_affected": "16.8-cert4\\-rc3"
        },
        {
            "last_affected": "16.8-cert4\\-rc4"
        },
        {
            "last_affected": "16.8-cert5"
        },
        {
            "last_affected": "16.8-cert6"
        },
        {
            "last_affected": "16.8-cert7"
        },
        {
            "last_affected": "16.8-cert8"
        },
        {
            "last_affected": "16.8-cert9"
        }
    ],
    "cpe": [
        "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:-:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc1:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc2:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc3:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc4:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert10:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert11:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert12:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert13:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert2:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert3:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert4:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc1:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc2:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc3:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc4:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert5:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert6:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert7:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert8:*:*:*:*:*:*",
        "cpe:2.3:a:digium:certified_asterisk:16.8:cert9:*:*:*:*:*:*"
    ]
}

Affected versions

16.*
16.25.0
16.25.0-rc1
16.25.1
18.*
18.11.0
18.11.0-rc1
18.11.1
19.*
19.3.0
19.3.0-rc1
19.3.1

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-26651.json"