4 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-57520
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the actioncreateconfig function. NOTE: this is dispute...
UBUNTU-CVE-2024-57520
Insecure Permissions vulnerability in asterisk v22 allows a remote attacker to execute arbitrary code via the actioncreateconfig function. NOTE: this is disputed by the Supplier because the impact is limited to creating empty files outside of the Asterisk product directory aka directory traversal...
Asterisk 安全漏洞
Asterisk is an Asterisk open source software for PBX systems that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk v22 has a security vulnerability that originates from the execution of arbitrary code via the actioncreateconfig function...
CVE-2024-57520
CVE-2024-57520 affects Asterisk v22 with an Insecure Permissions vulnerability in the action_createconfig function that could allow a remote attacker to execute arbitrary code. The supplier disputes the impact, noting the effect may be limited to creating empty files outside the Asterisk product ...