Joined: 12 May 2004
|Posted: Sun Oct 29, 2017 7:26 pm Post subject: [ GLSA 201710-29 ] Asterisk
|Gentoo Linux Security Advisory
Title: Asterisk: Multiple vulnerabilities (GLSA 201710-29)
Bug(s): #629682, #629692, #633856
Multiple vulnerabilities have been found in Asterisk, the worst of
which allows remote execution of arbitrary shell commands.
A Modular Open Source PBX System.
Vulnerable: < 11.25.3
Unaffected: >= 11.25.3
Architectures: All supported architectures
Multiple vulnerabilities have been discovered in Asterisk. Please review
the referenced CVE identifiers for details.
A remote attacker could execute arbitrary code, cause a denial of
service condition, or cause an unauthorized data disclosure by enticing a
user to run malicious code.
There is no known workaround at this time.
All Asterisk users should upgrade to the latest version:
|# emerge --sync
# emerge --ask --oneshot --verbose ">=net-misc/asterisk-13.17.2"