7.8
CVE-2026-23740
- EPSS 0.11%
- Veröffentlicht 06.02.2026 16:43:41
- Zuletzt bearbeitet 10.02.2026 18:25:39
- Erkennungen
Asterisk vulnerable to potential privilege escalation
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files to a directory that is world-writable (for example /tmp), an attacker with write permission(which is all users on a linux system) to that directory can cause root to execute arbitrary commands or overwrite arbitrary files by controlling the gdb init file and output paths. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sangoma ≫ Certified Asterisk Version 13.13.0 Update -
Sangoma ≫ Certified Asterisk Version 13.13.0 Update cert1
Sangoma ≫ Certified Asterisk Version 13.13.0 Update cert1-rc1
Sangoma ≫ Certified Asterisk Version 13.13.0 Update cert1-rc2
Sangoma ≫ Certified Asterisk Version 13.13.0 Update cert1-rc3
Sangoma ≫ Certified Asterisk Version 13.13.0 Update cert1-rc4
Sangoma ≫ Certified Asterisk Version 13.13.0 Update cert2
Sangoma ≫ Certified Asterisk Version 13.13.0 Update cert3
Sangoma ≫ Certified Asterisk Version 13.13.0 Update rc1
Sangoma ≫ Certified Asterisk Version 13.13.0 Update rc2
Sangoma ≫ Certified Asterisk Version 16.8 Update cert1-rc1
Sangoma ≫ Certified Asterisk Version 16.8 Update cert1-rc2
Sangoma ≫ Certified Asterisk Version 16.8 Update cert1-rc3
Sangoma ≫ Certified Asterisk Version 16.8 Update cert1-rc4
Sangoma ≫ Certified Asterisk Version 16.8 Update cert1-rc5
Sangoma ≫ Certified Asterisk Version 16.8 Update cert10
Sangoma ≫ Certified Asterisk Version 16.8 Update cert11
Sangoma ≫ Certified Asterisk Version 16.8 Update cert12
Sangoma ≫ Certified Asterisk Version 16.8 Update cert13
Sangoma ≫ Certified Asterisk Version 16.8 Update cert14
Sangoma ≫ Certified Asterisk Version 16.8 Update cert4-rc1
Sangoma ≫ Certified Asterisk Version 16.8 Update cert4-rc2
Sangoma ≫ Certified Asterisk Version 16.8 Update cert4-rc3
Sangoma ≫ Certified Asterisk Version 16.8 Update cert4-rc4
Sangoma ≫ Certified Asterisk Version 16.8.0 Update -
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert1
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert10
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert11
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert12
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert2
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert3
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert4
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert5
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert6
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert7
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert8
Sangoma ≫ Certified Asterisk Version 16.8.0 Update cert9
Sangoma ≫ Certified Asterisk Version 18.9 Update -
Sangoma ≫ Certified Asterisk Version 18.9 Update cert1
Sangoma ≫ Certified Asterisk Version 18.9 Update cert1-rc1
Sangoma ≫ Certified Asterisk Version 18.9 Update cert10
Sangoma ≫ Certified Asterisk Version 18.9 Update cert11
Sangoma ≫ Certified Asterisk Version 18.9 Update cert12
Sangoma ≫ Certified Asterisk Version 18.9 Update cert13
Sangoma ≫ Certified Asterisk Version 18.9 Update cert14
Sangoma ≫ Certified Asterisk Version 18.9 Update cert15
Sangoma ≫ Certified Asterisk Version 18.9 Update cert16
Sangoma ≫ Certified Asterisk Version 18.9 Update cert2
Sangoma ≫ Certified Asterisk Version 18.9 Update cert3
Sangoma ≫ Certified Asterisk Version 18.9 Update cert4
Sangoma ≫ Certified Asterisk Version 18.9 Update cert5
Sangoma ≫ Certified Asterisk Version 18.9 Update cert6
Sangoma ≫ Certified Asterisk Version 18.9 Update cert7
Sangoma ≫ Certified Asterisk Version 18.9 Update cert8
Sangoma ≫ Certified Asterisk Version 18.9 Update cert8-rc1
Sangoma ≫ Certified Asterisk Version 18.9 Update cert8-rc2
Sangoma ≫ Certified Asterisk Version 18.9 Update cert9
Sangoma ≫ Certified Asterisk Version 20.7 Update cert1
Sangoma ≫ Certified Asterisk Version 20.7 Update cert1-rc1
Sangoma ≫ Certified Asterisk Version 20.7 Update cert1-rc2
Sangoma ≫ Certified Asterisk Version 20.7 Update cert2
Sangoma ≫ Certified Asterisk Version 20.7 Update cert3
Sangoma ≫ Certified Asterisk Version 20.7 Update cert4
Sangoma ≫ Certified Asterisk Version 20.7 Update cert5
Sangoma ≫ Certified Asterisk Version 20.7 Update cert6
Sangoma ≫ Certified Asterisk Version 20.7 Update cert7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.11% | 0.016 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| CISA-ADP | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| security-advisories@github.com | 0 | 1.8 | 0 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N
|
CWE-427 Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.
https://github.com/asterisk/asterisk/security/advisories/GHSA-xpc6-x892-v83c