Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.2
Asterisk can let attackers disrupt phone services
published 4 days ago
Summary
The Asterisk telephony system packaged by cleanstart is vulnerable to a flaw that could let a remote user interfere with call handling. This could cause dropped calls, unauthorized call routing, or service outages. Update to the latest patched version of the cleanstart Asterisk package as soon as possible.
What to do
- Update cleanstart asterisk to version 20.5.1-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | asterisk |
< 20.5.1-r0 Fix: upgrade to 20.5.1-r0
|
Original advisory text
Asterisk is an open source private branch exchange and telephony toolkit
Security vulnerability affects the asterisk package. Asterisk is an open source private branch exchange and telephony toolkit.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2024-HJ32503 · OSV
Track software like this
Free during beta