Security Advisories

Stay up to date with the latest security advisories for the
Asterisk Project.

AST-2014-003: Remote Crash Vulnerability in PJSIP channel driver

March 10, 2014

http://downloads.asterisk.org/pub/security/AST-2014-003.pdf

https://downloads.asterisk.org/pub/security/AST-2014-003.pdf

AST-2014-002: Denial of Service Through File Descriptor Exhaustion with chan_sip Session-Timers

March 10, 2014

http://downloads.asterisk.org/pub/security/AST-2014-002.pdf

https://downloads.asterisk.org/pub/security/AST-2014-002.pdf

AST-2014-001: Stack Overflow in HTTP Processing of Cookie Headers

March 10, 2014

http://downloads.asterisk.org/pub/security/AST-2014-001.pdf

https://downloads.asterisk.org/pub/security/AST-2014-001.pdf

AST-2013-007: Asterisk Manager User Dialplan Permission Escalation

December 16, 2013

http://downloads.asterisk.org/pub/security/AST-2013-007.pdf

https://downloads.asterisk.org/pub/security/AST-2013-007.pdf

AST-2013-006: Buffer Overflow When Receiving Odd Length 16 bit SMS Message

December 16, 2013

http://downloads.asterisk.org/pub/security/AST-2013-006.pdf

https://downloads.asterisk.org/pub/security/AST-2013-006.pdf