A specifically malformed Authorization header in an incoming SIP request can cause Asterisk to crash: (GHSA-64qc-9×89-rx5j)
Resource exhaustion (DoS) vulnerability: remotely exploitable leak of RTP UDP ports and internal resources: (GHSA-557q-795j-wfx2)
Uncontrolled Search-Path Element in safe_asterisk script may allow local privilege escalation : (GHSA-v9q8-9j8m-5xwp)
Remote DoS and possible RCE in asterisk/res/res_stir_shaken/verification.c : (GHSA-mrq5-74j5-f5cr)
cli_permissions.conf: deny option does not work for disallowing shell commands : (GHSA-c7p6-7mvq-8jq2)