CVE-2024-53566

MEDIUM5.5EPSS 0.07%

asterisk - security update

Published: 12/2/2024Modified: 4/28/2026

Description

An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows attackers to execute a path traversal.

Affected packages (3)

Alpine/asteriskfrom 0, < 18.24.3-r1
Debian/asteriskfrom 0, < 1:16.28.0~dfsg-0+deb11u6
Debian/asteriskfrom 0, < 1:16.28.0~dfsg-0+deb11u6

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2024-53566
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2024-53566