6.5

CVE-2025-47779

Exploit

Using malformed From header can forge identity with ";" or NULL in name portion

Asterisk is an open-source private branch exchange (PBX). Prior to versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk, SIP requests of the type MESSAGE (RFC 3428) authentication do not get proper alignment. An authenticated attacker can spoof any user identity to send spam messages to the user with their authorization token. Abuse of this security issue allows authenticated attackers to send fake chat messages can be spoofed to appear to come from trusted entities. Even administrators who follow Security best practices and Security Considerations can be impacted. Therefore, abuse can lead to spam and enable social engineering, phishing and similar attacks. Versions 18.26.2, 20.14.1, 21.9.1, and 22.4.1 of Asterisk and versions 18.9-cert14 and 20.7-cert5 of certified-asterisk fix the issue.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sangoma ≫ Asterisk Version < 18.26.2
Sangoma ≫ Asterisk Version >= 20.0.0 < 20.14.1
Sangoma ≫ Asterisk Version >= 21.0.0 < 21.9.1
Sangoma ≫ Asterisk Version >= 22.0.0 < 22.4.1
Sangoma ≫ Certified Asterisk Version < 18.9
Sangoma ≫ Certified Asterisk Version 18.9 Update -
Sangoma ≫ Certified Asterisk Version 18.9 Update cert1
Sangoma ≫ Certified Asterisk Version 18.9 Update cert1-rc1
Sangoma ≫ Certified Asterisk Version 18.9 Update cert10
Sangoma ≫ Certified Asterisk Version 18.9 Update cert11
Sangoma ≫ Certified Asterisk Version 18.9 Update cert12
Sangoma ≫ Certified Asterisk Version 18.9 Update cert13
Sangoma ≫ Certified Asterisk Version 18.9 Update cert2
Sangoma ≫ Certified Asterisk Version 18.9 Update cert3
Sangoma ≫ Certified Asterisk Version 18.9 Update cert4
Sangoma ≫ Certified Asterisk Version 18.9 Update cert5
Sangoma ≫ Certified Asterisk Version 18.9 Update cert6
Sangoma ≫ Certified Asterisk Version 18.9 Update cert7
Sangoma ≫ Certified Asterisk Version 18.9 Update cert8
Sangoma ≫ Certified Asterisk Version 18.9 Update cert8-rc1
Sangoma ≫ Certified Asterisk Version 18.9 Update cert8-rc2
Sangoma ≫ Certified Asterisk Version 18.9 Update cert9
Sangoma ≫ Certified Asterisk Version 20.7 Update cert1
Sangoma ≫ Certified Asterisk Version 20.7 Update cert1-rc1
Sangoma ≫ Certified Asterisk Version 20.7 Update cert1-rc2
Sangoma ≫ Certified Asterisk Version 20.7 Update cert2
Sangoma ≫ Certified Asterisk Version 20.7 Update cert3
Sangoma ≫ Certified Asterisk Version 20.7 Update cert4
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.394
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
security-advisories@github.com 7.7 3.1 4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
CWE-140 Improper Neutralization of Delimiters

The product does not neutralize or incorrectly neutralizes delimiters.

CWE-792 Incomplete Filtering of One or More Instances of Special Elements

The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.

https://github.com/asterisk/asterisk/security/advisories/GHSA-2grh-7mhv-fcfw
Vendor Advisory
Exploit
https://github.com/asterisk/asterisk/blob/master/configs/samples/pjsip.conf.sample
Product
https://lists.debian.org/debian-lts-announce/2025/06/msg00003.html