Security Advisories

Stay up to date with the latest security advisories for the
Asterisk Project.

AST-2016-006: Crash on ACK from unknown endpoint

September 8, 2016

http://downloads.asterisk.org/pub/security/AST-2016-006.html

https://downloads.asterisk.org/pub/security/AST-2016-006.html

AST-2016-005: TCP denial of service in PJProject

April 14, 2016

http://downloads.asterisk.org/pub/security/AST-2016-005.pdf

https://downloads.asterisk.org/pub/security/AST-2016-005.pdf

AST-2016-004: Long Contact URIs in REGISTER requests can crash

April 14, 2016

http://downloads.asterisk.org/pub/security/AST-2016-004.pdf

https://downloads.asterisk.org/pub/security/AST-2016-004.pdf

AST-2016-003: Remote crash vulnerability when receiving UDPTL FAX data

February 3, 2016

http://downloads.asterisk.org/pub/security/AST-2016-003.pdf

https://downloads.asterisk.org/pub/security/AST-2016-003.pdf

AST-2016-002: File descriptor exhaustion in chan_sip

February 3, 2016

http://downloads.asterisk.org/pub/security/AST-2016-002.pdf

https://downloads.asterisk.org/pub/security/AST-2016-002.pdf