CVE-2025-1131

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-1131

A local privilege escalation vulnerability exists in the safe_asterisk script included with the Asterisk toolkit package. When Asterisk is started via this script (common in SysV init or FreePBX environments), it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating ownership or permissions. Non-root users with legitimate write access to /etc/asterisk can exploit this behaviour by placing malicious scripts in the startup.d directory, which will then execute with root privileges upon service restart.

Published Oct 10, 2025

https://github.com/asterisk/asterisk/security/advisories/GHSA-v9q8-9j8m-5xwp

CVSS ScoreHigh

7.8


rpm	asterisk	1.8.32.3-2.el6
rpm	asterisk	18.12.1-1.el8.1
rpm	asterisk	18.12.1-1.el8.2
rpm	asterisk	18.12.1-1.el9.1
rpm	asterisk-ael	18.12.1-1.el8.1
rpm	asterisk-ael	18.12.1-1.el8.2
rpm	asterisk-ael	18.12.1-1.el9.1
rpm	asterisk-ael-debuginfo	18.12.1-1.el8.1
rpm	asterisk-ael-debuginfo	18.12.1-1.el8.2
rpm	asterisk-ael-debuginfo	18.12.1-1.el9.1
rpm	asterisk-alembic	18.12.1-1.el8.1
rpm	asterisk-alembic	18.12.1-1.el8.2
rpm	asterisk-alembic	18.12.1-1.el9.1
rpm	asterisk-alsa	1.8.32.3-2.el6
rpm	asterisk-alsa	18.12.1-1.el8.1
rpm	asterisk-alsa	18.12.1-1.el8.2
rpm	asterisk-alsa	18.12.1-1.el9.1
rpm	asterisk-alsa-debuginfo	18.12.1-1.el8.1
rpm	asterisk-alsa-debuginfo	18.12.1-1.el8.2
rpm	asterisk-alsa-debuginfo	18.12.1-1.el9.1
rpm	asterisk-apidoc	1.8.32.3-2.el6
rpm	asterisk-calendar	1.8.32.3-2.el6
rpm	asterisk-calendar	18.12.1-1.el8.1
rpm	asterisk-calendar	18.12.1-1.el8.2
rpm	asterisk-calendar	18.12.1-1.el9.1
rpm	asterisk-calendar-debuginfo	18.12.1-1.el8.1
rpm	asterisk-calendar-debuginfo	18.12.1-1.el8.2
rpm	asterisk-calendar-debuginfo	18.12.1-1.el9.1
rpm	asterisk-corosync	18.12.1-1.el8.1
rpm	asterisk-corosync	18.12.1-1.el8.2
rpm	asterisk-corosync	18.12.1-1.el9.1
rpm	asterisk-corosync-debuginfo	18.12.1-1.el8.1
rpm	asterisk-corosync-debuginfo	18.12.1-1.el8.2
rpm	asterisk-corosync-debuginfo	18.12.1-1.el9.1
rpm	asterisk-curl	1.8.32.3-2.el6
rpm	asterisk-curl	18.12.1-1.el8.1
rpm	asterisk-curl	18.12.1-1.el8.2
rpm	asterisk-curl	18.12.1-1.el9.1
rpm	asterisk-curl-debuginfo	18.12.1-1.el8.1
rpm	asterisk-curl-debuginfo	18.12.1-1.el8.2
rpm	asterisk-curl-debuginfo	18.12.1-1.el9.1
rpm	asterisk-dahdi	1.8.32.3-2.el6
rpm	asterisk-dahdi	18.12.1-1.el8.1
rpm	asterisk-dahdi	18.12.1-1.el8.2
rpm	asterisk-dahdi	18.12.1-1.el9.1
rpm	asterisk-dahdi-debuginfo	18.12.1-1.el8.1
rpm	asterisk-dahdi-debuginfo	18.12.1-1.el8.2
rpm	asterisk-dahdi-debuginfo	18.12.1-1.el9.1
rpm	asterisk-debuginfo	1.8.32.3-2.el6
rpm	asterisk-debuginfo	18.12.1-1.el8.1

Ecosystem	Package	Version

CVE-2025-1131 | Components Impacted | Sonatype Guide | Sonatype Guide

Find vulnerabilities. Fix fast with AI.

CVE-2025-1131