| Package | Affected versions | Patched versions |
|---|---|---|
| asterisk | = 13.0.0= 13.0.1= 13.0.2= 13.1.0= 13.1.1= 13.10.0= 13.11.0= 13.11.1= 13.11.2= 13.12= 13.12.0= 13.12.1= 13.12.2= 13.13= 13.13.0= 13.14.0= 13.2.0= 13.2.1= 13.3.0= 13.3.2= 13.4.0= 13.5.0= 13.6.0= 13.7.0= 13.7.1= 13.7.2= 13.8.0= 13.8.1= 13.8.2= 13.9.0= 13.9.1= 14.0= 14.0.0= 14.0.1= 14.0.2= 14.01= 14.02= 14.1= 14.1.0= 14.1.1= 14.1.2= 14.2= 14.2.0= 14.2.1= 14.3.0 | |
| certified asterisk | ≤ 13.13-cert2 |
Remote code execution can occur in Asterisk Open Source 13.x before 13.14.1 and 14.x before 14.3.1 and Certified Asterisk 13.13 before 13.13-cert3 because of a buffer overflow in a CDR user field, related to X-ClientCode in chan_sip, the CDR dialplan function, and the AMI Monitor action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free