VDB

CVE-2024-42491

CVE-2024-42491 PUBLISHED CVSS 9.300000190734863 CRITICAL

Asterisk ist eine komplette Open Source Multiprotokoll Telefonanlage (PBX) auf Softwarebasis.

EPSS 0.96% · 76.8th percentile

Risk Scores

CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.96%
76.8th percentile

Affected Products

VendorProductVersions
Open SourceOpen Source Asterisk <21.4.3
Open SourceOpen Source Asterisk <18.24.3
FedoraFedora Linux
Open SourceOpen Source Asterisk certified <18.9-cert12
Open SourceOpen Source Asterisk certified <20.7-cert3
Open SourceOpen Source Asterisk <20.9.3
DebianDebian Linux

Timeline

  • Jan 21, 1970 Security Advisory
  • Sep 5, 2024 CVE Published
  • Sep 6, 2024 EPSS Score
  • Sep 26, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 16, 2024 EPSS Score
  • Nov 25, 2024 EPSS Score
  • Dec 16, 2024 EPSS Score
  • Jan 5, 2025 EPSS Score
  • Jan 25, 2025 EPSS Score
  • Feb 14, 2025 EPSS Score
  • Mar 26, 2025 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›