8.8
CVE-2024-42365
- EPSS 4.7%
- Veröffentlicht 08.08.2024 17:15:19
- Zuletzt bearbeitet 03.11.2025 22:18:05
- Erkennungen
LoginAsterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan
Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with `write=originate` may change all configuration files in the `/etc/asterisk/` directory. This occurs because they are able to curl remote files and write them to disk, but are also able to append to existing files using the `FILE` function inside the `SET` application. This issue may result in privilege escalation, remote code execution and/or blind server-side request forgery with arbitrary protocol. Asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2 contain a fix for this issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Asterisk ≫ Certified Asterisk Version 13.13.0
Asterisk ≫ Certified Asterisk Version 13.13.0 Update cert1
Asterisk ≫ Certified Asterisk Version 13.13.0 Update cert1-rc1
Asterisk ≫ Certified Asterisk Version 13.13.0 Update cert1-rc2
Asterisk ≫ Certified Asterisk Version 13.13.0 Update cert1-rc3
Asterisk ≫ Certified Asterisk Version 13.13.0 Update cert1-rc4
Asterisk ≫ Certified Asterisk Version 13.13.0 Update cert2
Asterisk ≫ Certified Asterisk Version 13.13.0 Update cert3
Asterisk ≫ Certified Asterisk Version 13.13.0 Update rc1
Asterisk ≫ Certified Asterisk Version 13.13.0 Update rc2
Asterisk ≫ Certified Asterisk Version 16.8 Update cert1-rc1
Asterisk ≫ Certified Asterisk Version 16.8 Update cert1-rc2
Asterisk ≫ Certified Asterisk Version 16.8 Update cert1-rc3
Asterisk ≫ Certified Asterisk Version 16.8 Update cert1-rc4
Asterisk ≫ Certified Asterisk Version 16.8 Update cert1-rc5
Asterisk ≫ Certified Asterisk Version 16.8 Update cert10
Asterisk ≫ Certified Asterisk Version 16.8 Update cert11
Asterisk ≫ Certified Asterisk Version 16.8 Update cert12
Asterisk ≫ Certified Asterisk Version 16.8 Update cert13
Asterisk ≫ Certified Asterisk Version 16.8 Update cert14
Asterisk ≫ Certified Asterisk Version 16.8 Update cert4-rc1
Asterisk ≫ Certified Asterisk Version 16.8 Update cert4-rc2
Asterisk ≫ Certified Asterisk Version 16.8 Update cert4-rc3
Asterisk ≫ Certified Asterisk Version 16.8 Update cert4-rc4
Asterisk ≫ Certified Asterisk Version 16.8.0 Update -
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert1
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert10
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert11
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert12
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert2
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert3
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert4
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert5
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert6
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert7
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert8
Asterisk ≫ Certified Asterisk Version 16.8.0 Update cert9
Asterisk ≫ Certified Asterisk Version 18.9 Update cert1
Asterisk ≫ Certified Asterisk Version 18.9 Update cert1-rc1
Asterisk ≫ Certified Asterisk Version 18.9 Update cert10
Asterisk ≫ Certified Asterisk Version 18.9 Update cert2
Asterisk ≫ Certified Asterisk Version 18.9 Update cert3
Asterisk ≫ Certified Asterisk Version 18.9 Update cert4
Asterisk ≫ Certified Asterisk Version 18.9 Update cert5
Asterisk ≫ Certified Asterisk Version 18.9 Update cert6
Asterisk ≫ Certified Asterisk Version 18.9 Update cert7
Asterisk ≫ Certified Asterisk Version 18.9 Update cert8
Asterisk ≫ Certified Asterisk Version 18.9 Update cert8-rc1
Asterisk ≫ Certified Asterisk Version 18.9 Update cert8-rc2
Asterisk ≫ Certified Asterisk Version 18.9 Update cert9
Asterisk ≫ Certified Asterisk Version 20.7 Update cert1
Asterisk ≫ Certified Asterisk Version 20.7 Update cert1-rc1
Asterisk ≫ Certified Asterisk Version 20.7 Update cert1-rc2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.7% | 0.906 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| security-advisories@github.com | 7.4 | 3.1 | 3.7 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
|
CWE-1220 Insufficient Granularity of Access Control
The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.
CWE-267 Privilege Defined With Unsafe Actions
A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.
https://github.com/asterisk/asterisk/blob/14367caaf7241df1eceea7c45c5b261989c2c6db/main/manager.c#L6426
https://github.com/asterisk/asterisk/blob/7d28165cb1b2d02d66e8693bd3fe23ee72fc55d8/main/manager.c#L6426
https://github.com/asterisk/asterisk/commit/42a2f4ccfa2c7062a15063e765916b3332e34cc4
https://github.com/asterisk/asterisk/commit/7a0090325bfa9d778a39ae5f7d0a98109e4651c8
https://github.com/asterisk/asterisk/commit/b4063bf756272254b160b6d1bd6e9a3f8e16cc71
https://github.com/asterisk/asterisk/commit/bbe68db10ab8a80c29db383e4dfe14f6eafaf993
https://github.com/asterisk/asterisk/commit/faddd99f2b9408b524e5eb8a01589fe1fa282df2
https://github.com/asterisk/asterisk/security/advisories/GHSA-c4cg-9275-6w44
https://lists.debian.org/debian-lts-announce/2024/10/msg00016.html