Skip to content
OpenAdvisories
Medium WID-SEC-2025-1135 2 CVEs

Asterisk: Mehrere Schwachstellen

Published May 22, 2025 · Updated Apr 12, 2026 · Revision 3 · de-DE

Vendor: Debian Vendor: Fedora Product: Linux Product: Linux Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um falsche Informationen darzustellen und um Sicherheitsvorkehrungen zu umgehen.

Product

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

Vulnerabilities 2

  • High 7.7
    CVE-2025-47779

    Using malformed From header can forge identity with ";" or NULL in name portion

    Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE (RFC 3428) authentication do not get p…

    asterisk asterisk asterisk asterisk Debian Ubuntu
  • Medium 4.8
    CVE-2025-47780

    cli_permissions.conf: deny option does not work for disallowing shell commands

    Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, trying to disallow shell commands to be run via the Asterisk command li…

    asterisk asterisk asterisk asterisk Debian Ubuntu

Revision history

  1. #3

    Neue Updates von Fedora aufgenommen

  2. #2

    Neue Updates von Debian aufgenommen

  3. #1

    Initiale Fassung

References