| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk | = 11.0.0= 11.0.1= 11.0.2= 11.1.0= 11.1.1= 11.1.2= 11.10.0= 11.10.1= 11.10.2= 11.11.0= 11.12.0= 11.12.1= 11.13.0= 11.13.1= 11.14.0= 11.14.1= 11.14.2= 11.15.0= 11.15.1= 11.16.0= 11.17.0= 11.17.1= 11.18.0= 11.19.0= 11.2.0= 11.2.1= 11.2.2= 11.20.0= 11.21.0= 11.21.1= 11.21.2= 11.22.0= 11.23.0= 11.23.1= 11.24.0= 11.24.1= 11.25.0= 11.25.1= 11.4.0= 11.6.0= 11.6.1= 11.7.0= 11.8.0= 11.8.1= 11.9.0= 13.0.0= 13.0.1= 13.0.2= 13.1.0= 13.1.1= 13.10.0= 13.11.0= 13.11.1= 13.11.2= 13.12= 13.12.0= 13.12.1= 13.12.2= 13.13= 13.13.0= 13.13.1= 13.14.0= 13.14.1= 13.15.0= 13.15.1= 13.16.0= 13.17.0= 13.2.0= 13.2.1= 13.3.0= 13.3.2= 13.4.0= 13.5.0= 13.6.0= 13.7.0= 13.7.1= 13.7.2= 13.8.0= 13.8.1= 13.8.2= 13.9.0= 13.9.1= 14.0= 14.0.0= 14.0.1= 14.0.2= 14.01= 14.02= 14.1= 14.1.0= 14.1.1= 14.1.2= 14.2= 14.2.0= 14.2.1= 14.3.0= 14.3.1= 14.4.0= 14.4.1= 14.5.0= 14.6.0 | |
| certified asterisk | = 11.6= 13.13 |
In Asterisk 11.x before 11.25.2, 13.x before 13.17.1, and 14.x before 14.6.1 and Certified Asterisk 11.x before 11.6-cert17 and 13.x before 13.13-cert5, unauthorized command execution is possible. The app_minivm module has an "externnotify" program configuration option that is executed by the MinivmNotify dialplan application. The application uses the caller-id name and number as part of a built string passed to the OS shell for interpretation and execution. Since the caller-id name and number can come from an untrusted source, a crafted caller-id name or number allows an arbitrary shell command injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free