CVE-2023-49294

Asterisk is an open source private branch exchange and telephony toolkit. In Asterisk prior to versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, it is possible to read any arbitrary file even when the `live_dangerously` is not enabled. This allows arbitrary files to be read. Asterisk versions 18.20.1, 20.5.1, and 21.0.1, as well as certified-asterisk prior to 18.9-cert6, contain a fix for this issue.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
GitHub_MCNA
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
VendorProductVersion
digiumasterisk
𝑥
< 18.20.1
digiumasterisk
19.0.0 ≤
𝑥
< 20.5.1
digiumasterisk
21.0.0
sangomacertified_asterisk
13.13.0
sangomacertified_asterisk
13.13.0:cert1
sangomacertified_asterisk
13.13.0:cert1-rc1
sangomacertified_asterisk
13.13.0:cert1-rc2
sangomacertified_asterisk
13.13.0:cert1-rc3
sangomacertified_asterisk
13.13.0:cert1-rc4
sangomacertified_asterisk
13.13.0:cert2
sangomacertified_asterisk
13.13.0:cert3
sangomacertified_asterisk
13.13.0:rc1
sangomacertified_asterisk
13.13.0:rc2
sangomacertified_asterisk
16.8.0
sangomacertified_asterisk
16.8.0:cert1
sangomacertified_asterisk
16.8.0:cert10
sangomacertified_asterisk
16.8.0:cert11
sangomacertified_asterisk
16.8.0:cert12
sangomacertified_asterisk
16.8.0:cert2
sangomacertified_asterisk
16.8.0:cert3
sangomacertified_asterisk
16.8.0:cert4
sangomacertified_asterisk
16.8.0:cert5
sangomacertified_asterisk
16.8.0:cert6
sangomacertified_asterisk
16.8.0:cert7
sangomacertified_asterisk
16.8.0:cert8
sangomacertified_asterisk
16.8.0:cert9
sangomacertified_asterisk
18.9:cert1
sangomacertified_asterisk
18.9:cert2
sangomacertified_asterisk
18.9:cert3
sangomacertified_asterisk
18.9:cert4
sangomacertified_asterisk
18.9:cert5
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
asterisk
bullseye
1:16.28.0~dfsg-0+deb11u4
fixed
bullseye (security)
1:16.28.0~dfsg-0+deb11u5
fixed
sid
1:22.1.0~dfsg+~cs6.14.60671435-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
asterisk
oracular
needs-triage
noble
needs-triage
mantic
ignored
lunar
ignored
jammy
needs-triage
focal
needs-triage
bionic
needs-triage
xenial
needs-triage
trusty
ignored
Common Weakness Enumeration
References
https://github.com/asterisk/asterisk/blob/master/main/manager.c#L3757
https://github.com/asterisk/asterisk/commit/424be345639d75c6cb7d0bd2da5f0f407dbd0bd5
https://github.com/asterisk/asterisk/security/advisories/GHSA-8857-hfmw-vg8f
https://lists.debian.org/debian-lts-announce/2023/12/msg00019.html
https://github.com/asterisk/asterisk/blob/master/main/manager.c#L3757
https://github.com/asterisk/asterisk/commit/424be345639d75c6cb7d0bd2da5f0f407dbd0bd5
https://github.com/asterisk/asterisk/security/advisories/GHSA-8857-hfmw-vg8f
https://lists.debian.org/debian-lts-announce/2023/12/msg00019.html