Vulnerability Description
Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files to a directory that is world-writable (for example /tmp), an attacker with write permission(which is all users on a linux system) to that directory can cause root to execute arbitrary commands or overwrite arbitrary files by controlling the gdb init file and output paths. This issue has been patched in versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2.
CVSS Score
NONE
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sangoma | Certified Asterisk | 13.13.0 |
| Sangoma | Asterisk | < 20.18.2 |
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-23740?
CVE-2026-23740 is a vulnerability with a CVSS score of 0.0 (NONE). Asterisk is an open source private branch exchange and telephony toolkit. Prior to versions 20.7-cert9, 20.18.2, 21.12.1, 22.8.2, and 23.2.2, when ast_coredumper writes its gdb init and output files t...
How severe is CVE-2026-23740?
CVE-2026-23740 has been rated NONE with a CVSS base score of 0.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-23740?
Check the references section above for vendor advisories and patch information. Affected products include: Sangoma Certified Asterisk, Sangoma Asterisk.