Skip to content
OpenAdvisories
Medium WID-SEC-2025-1697 2 CVEs

Asterisk: Mehrere Schwachstellen

Published Jul 31, 2025 · Updated Apr 12, 2026 · Revision 6 · de-DE

Vendor: Debian Vendor: Fedora Vendor: gentoo Product: Linux Product: Linux Product: Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Asterisk ausnutzen, um seine Privilegien zu erhöhen, oder einen Denial-of-Service auszulösen.

Product

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

Vulnerabilities 2

  • High 7.0
    CVE-2025-1131

    Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation

    A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package. When Asterisk is started via this script (common in SysV init or FreePBX environments), it sources all .sh files located in /etc/asterisk…

    asterisk asterisk asterisk asterisk Debian Ubuntu
  • Medium 6.5
    CVE-2025-49832

    Asterisk is Vulnerable to Remote DoS and possible RCE Attacks During Memory Allocation

    Asterisk is an open source private branch exchange and telephony toolkit. In versions up to and including 18.26.2, between 20.00.0 and 20.15.0, 20.7-cert6, 21.00.0, 22.00.0 through 22.5.0, there is a remote DoS and possible RCE condition in `asterisk/res/res_…

    asterisk asterisk asterisk asterisk Debian Ubuntu

Revision history

  1. #6

    Neue Updates von Fedora aufgenommen

  2. #5

    Neue Updates von Gentoo aufgenommen

  3. #4

    Neue Updates von Debian aufgenommen

  4. #3

    Referenz(en) aufgenommen: EUVD-2025-30828

  5. #2

    Referenz(en) aufgenommen: EUVD-2025-23381

  6. #1

    Initiale Fassung

References