Debian/asterisk: critical 9.8
Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the action_createconfig function. NOTE: this is disputed by the Supplier because the impact is
Action: Upgrade asterisk to 1:22.3.0~dfsg+~cs6.15.60671435-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:22.3.0~dfsg+~cs6.15.60671435-1 | - |
Fixed versions
| 1:22.3.0~dfsg+~cs6.15.60671435-1 |
Sources
published · modified · JSON