[ GLSA 201710-29 ] Asterisk

[GLSA]

Gentoo Linux Security Advisory

Title: Asterisk: Multiple vulnerabilities (GLSA 201710-29)
Severity: normal
Exploitable: remote
Date: 2017-10-29
Bug(s): #629682, #629692, #633856
ID: 201710-29

Synopsis

Multiple vulnerabilities have been found in Asterisk, the worst of
which allows remote execution of arbitrary shell commands.


Background

A Modular Open Source PBX System.

Affected Packages

Package: net-misc/asterisk
Vulnerable: < 11.25.3
Unaffected: >= 11.25.3
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Asterisk. Please review
the referenced CVE identifiers for details.


Impact

A remote attacker could execute arbitrary code, cause a denial of
service condition, or cause an unauthorized data disclosure by enticing a
user to run malicious code.


Workaround

There is no known workaround at this time.

Resolution

All Asterisk users should upgrade to the latest version: