CVE-2019-18610

Name
CVE-2019-18610
Description
An issue was discovered in manager.c in Sangoma Asterisk through 13.x, 16.x, 17.x and Certified Asterisk 13.21 through 13.21-cert4. A remote authenticated Asterisk Manager Interface (AMI) user without system authorization could use a specially crafted Originate AMI request to execute arbitrary system commands.
NVD Severity
high
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
Patch http://downloads.asterisk.org/pub/security/AST-2019-007.html
Vendor Advisory https://www.asterisk.org/downloads/security-advisories
Mailing List https://lists.debian.org/debian-lts-announce/2019/11/msg00038.html

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:* asterisk >= 13.0.0 < 13.29.2
cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:* asterisk >= 16.0.0 < 16.6.2
cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:* asterisk >= 17.0.0 < 17.0.1
cpe:2.3:a:digium:certified_asterisk:13.21.0:*:*:*:*:*:*:* certified_asterisk == None == 13.21.0

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
asterisk edge-main 16.6.2-r0 None fixed
asterisk edge-main 16.5.1-r0 None possibly vulnerable
asterisk edge-main 16.4.1-r0 None possibly vulnerable
asterisk edge-main 16.3.0-r0 None possibly vulnerable
asterisk 3.22-main 16.6.2-r0 None fixed
asterisk 3.22-main 16.5.1-r0 None possibly vulnerable
asterisk 3.22-main 16.4.1-r0 None possibly vulnerable
asterisk 3.22-main 16.3.0-r0 None possibly vulnerable
asterisk 3.21-main 16.6.2-r0 None fixed
asterisk 3.21-main 16.5.1-r0 None possibly vulnerable
asterisk 3.21-main 16.4.1-r0 None possibly vulnerable
asterisk 3.21-main 16.3.0-r0 None possibly vulnerable
asterisk 3.20-main 16.6.2-r0 None fixed
asterisk 3.20-main 16.5.1-r0 None possibly vulnerable
asterisk 3.20-main 16.4.1-r0 None possibly vulnerable
asterisk 3.20-main 16.3.0-r0 None possibly vulnerable
asterisk 3.19-main 16.6.2-r0 None fixed
asterisk 3.19-main 16.5.1-r0 None possibly vulnerable
asterisk 3.19-main 16.4.1-r0 None possibly vulnerable
asterisk 3.19-main 16.3.0-r0 None possibly vulnerable
asterisk 3.18-main 16.6.2-r0 None fixed
asterisk 3.17-main 16.6.2-r0 None fixed
asterisk 3.12-main 16.6.2-r0 None fixed
asterisk 3.11-main 16.6.2-r0 Timo Teras <timo.teras@iki.fi> fixed
asterisk 3.10-main 16.3.0-r3 Timo Teras <timo.teras@iki.fi> fixed