CVE-2024-42365
HIGHDescription
Asterisk is an open source private branch exchange (PBX) and telephony toolkit. Prior to asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2, an AMI user with `write=originate` may change all configuration files in the `/etc/asterisk/` directory. This occurs because they are able to curl remote files and write them to disk, but are also able to append to existing files using the `FILE` function inside the `SET` application. This issue may result in privilege escalation, remote code execution and/or blind server-side request forgery with arbitrary protocol. Asterisk versions 18.24.2, 20.9.2, and 21.4.2 and certified-asterisk versions 18.9-cert11 and 20.7-cert2 contain a fix for this issue.
Is your site exposed to CVE-2024-42365?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| asterisk | asterisk |
| asterisk | asterisk |
| asterisk | asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
| asterisk | certified_asterisk |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-42365? +
How severe is CVE-2024-42365? +
What products are affected by CVE-2024-42365? +
How do I check if I'm vulnerable to CVE-2024-42365? +
Related Vulnerabilities
An attacker with knowledge of creating user accounts during VM deployment on Google Cloud Platform (GCP) using the OS Login …
In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor …
An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1. The com.dtexsystems.helper service, responsible for handling privileged operations within the …
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application allows users …
Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges …
Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges …