DSA-5358: -1 asterisk -- security update

Published Feb 23, 2023

Updated

asterisk - security update

Other sources

Multiple security vulnerabilities have been discovered in Asterisk, an Open Source Private Branch Exchange. Buffer overflows and other programming errors could be exploited for launching a denial of service attack or the execution of arbitrary code.

Affected Software

2 affected components

debian/asterisk

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade asterisk to a version that resolves this vulnerability.
Patch DSA-5358-1

Event History

Feb 23, 2023

Advisory Published

12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which CVEs should teams use when correlating this advisory with vulnerability scans and logs?

The advisory references CVE-2022-23537, CVE-2022-23547, and CVE-2022-31031.

Does the advisory identify affected Debian Asterisk versions or configuration conditions?

No affected version range, fixed version, or configuration prerequisite is provided in the available data.

Are temporary mitigations or detection indicators provided for systems that cannot be updated immediately?

No interim mitigations, exploit indicators, or detection guidance is included in the available data.