Nixpkgs security tracker
3.5 LOW
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Adjacent (A)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): Low (L)
- Integrity (I): None (N)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Adjacent (A)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): Low (L)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
-
@LeSuisse
ignored
5 packages
- asterisk-ldap
- asterisk-module-sccp
- python312Packages.asterisk-mbox
- python313Packages.asterisk-mbox
- python314Packages.asterisk-mbox
- @LeSuisse accepted
- @LeSuisse published on GitHub
The Asterisk embedded web server 's /httpstatus page echos user supplied values(cookie and query string) without sanitization
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, user supplied/control values for Cookies and any GET variable query Parameter are directly interpolated into the HTML of the page using ast_str_append. The endpoint at GET /httpstatus is the potential vulnerable endpoint relating to asterisk/main /http.c. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2.
References
-
https://github.com/asterisk/asterisk/security/advisories/GHSA-v6hp-wh3r-cwxh x_refsource_CONFIRM
Affected products
- ==< 21.12.1
- ==< 22.8.2
- ==< 23.2.2
- ==< 20.18.2
- ==< 20.7-cert9
Matching in nixpkgs
pkgs.asterisk_18
Software implementation of a telephone private branch exchange (PBX)
pkgs.asterisk_20
Software implementation of a telephone private branch exchange (PBX)
pkgs.asterisk_22
Software implementation of a telephone private branch exchange (PBX)
Ignored packages (5)
pkgs.asterisk-ldap
Software implementation of a telephone private branch exchange (PBX)
pkgs.asterisk-module-sccp
Replacement for the SCCP channel driver in Asterisk
pkgs.python312Packages.asterisk-mbox
Client side of a client/server to interact with Asterisk voicemail mailboxes
pkgs.python313Packages.asterisk-mbox
Client side of a client/server to interact with Asterisk voicemail mailboxes
pkgs.python314Packages.asterisk-mbox
Client side of a client/server to interact with Asterisk voicemail mailboxes
Package maintainers
-
@yorickvP Yorick van Pelt <yorickvanpelt@gmail.com>
-
@auntieNeo Jonathan Glines <auntieNeo@gmail.com>
-
@DerTim1 Tim Digel <tim.digel@active-group.de>