Linux Distros Unpatched Vulnerability : CVE-2024-57520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the actioncreateconfig function. NOTE: this is dispute...

UBUNTU-CVE-2024-57520

Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the actioncreateconfig function. NOTE: this is disputed by the Supplier because the impact is limited to creating empty files outside of the Asterisk product directory aka directory traversal...

CVE-2024-57520

Asterisk version 22 is impacted by an Insecure Permissions vulnerability in the action_createconfig function. This flaw could allow a remote attacker to execute arbitrary code. However, the supplier disputes this, stating the impact is limited to directory traversal (creating empty files outside ...

Asterisk 安全漏洞

Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk v22 has a security vulnerability that originates from the execution of arbitrary code via the actioncreateconfig function...