| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk | ≥ 13.0.0, < 13.29.2≥ 16.0.0, < 16.6.2≥ 17.0.0, < 17.0.1 | 13.29.216.6.217.0.1 |
| certified asterisk | = 13.21.0 |
An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free