CVE-2025-1131

Katalog CVE

CVSS 7.8 · High EPSS 0,22%

Kerentanan Uncontrolled Search Path Element pada sangoma asterisk, sangoma certified asterisk. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package. When Asterisk is started via this script (common in SysV init or FreePBX environments), it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating ownership or permissions. Non-root users with legitimate write access to /etc/asterisk can exploit this behaviour by placing malicious scripts in the startup.d directory, which will then execute with root privileges upon service restart.

Rincian

Terbit di NVD

23 September 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/asterisk/asterisk/security/advisories/GHSA-v9q8-9j8m-5xwp exploit · advisory vendor
• https://lists.debian.org/debian-lts-announce/2025/10/msg00006.html