{"action":"Upgrade asterisk to 1:20.9.3~dfsg+~cs6.14.60671435-1 or later.","affected":[{"fixed":"1:20.9.3~dfsg+~cs6.14.60671435-1","introduced":"0"}],"component":"asterisk","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["1:20.9.3~dfsg+~cs6.14.60671435-1"],"id":"tcs_01M5NKXS7GT8EX9SB08QC4A8HW","modified_at":"2026-11-02T12:02:46.884932221Z","published_at":"2024-08-08T17:15:19.340Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2024-42365","https://security-tracker.debian.org/tracker/CVE-2024-42365"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2024-42365","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2024-42365"}],"summary":"Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AM"}