Skip to content
OpenAdvisories
Medium WID-SEC-2023-3158 3 CVEs

Digium Certified Asterisk: Mehrere Schwachstellen

Published Dec 14, 2023 · Updated Apr 12, 2026 · Revision 6 · de-DE

Vendor: Debian Vendor: Digium Vendor: Fedora Vendor: gentoo Product: Certified Asterisk Product: Linux Product: Linux Product: Linux Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Digium Certified Asterisk und Asterisk ausnutzen, um einen Denial of Service Angriff durchzuführen oder Informationen offenzulegen.

Product

Certified Asterisk ist eine komplette Multiprotokoll Telefonanlage (PBX) auf Softwarebasis mit erweitertem Support.
Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

Vulnerabilities 3

  • High 7.5
    CVE-2023-37457

    Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using 'update'

    Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk versions 18.20.0 and prior, 20.5.0 and prior, and 21.0.0; as well as ceritifed-asterisk 18.9-cert5 and prior, the 'update' functionality of the PJSIP_HEADER dialplan functio…

    asterisk asterisk asterisk asterisk Debian Ubuntu Alpine
  • High 7.5
    CVE-2023-49786

    Asterisk susceptible to Denial of Service via DTLS Hello packets during call initiation

    Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1; as well as certified-asterisk prior to 18.9-cert6; Asterisk is susceptible to a DoS due to a race condition in the hello hands…

    asterisk asterisk asterisk asterisk Debian Ubuntu Alpine
  • Medium 4.9
    CVE-2023-49294 EPSS 45%

    Asterisk Path Traversal vulnerability

    Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the `live_dangerously` …

    asterisk asterisk asterisk asterisk Debian Ubuntu Alpine

Revision history

  1. #6

    Neue Updates von Fedora aufgenommen

  2. #5

    Neue Updates von Gentoo aufgenommen

  3. #4

    Neue Updates von Debian aufgenommen

  4. #3

    Neue Updates von Debian aufgenommen

  5. #2

    Link ergänzt

  6. #1

    Initiale Fassung

References