Security Advisories

Stay up to date with the latest security advisories for the
Asterisk Project.

Cross-site AJAX request vulnerability

November 4, 2009

http://downloads.asterisk.org/pub/security/AST-2009-009.pdf

https://downloads.asterisk.org/pub/security/AST-2009-009.pdf

SIP responses expose valid usernames

November 4, 2009

http://downloads.asterisk.org/pub/security/AST-2009-008.pdf

https://downloads.asterisk.org/pub/security/AST-2009-008.pdf

ACL not respected on SIP INVITE

October 26, 2009

http://downloads.asterisk.org/pub/security/AST-2009-007.pdf

https://downloads.asterisk.org/pub/security/AST-2009-007.pdf

IAX2 Call Number Resource Exhaustion

October 5, 2009

http://downloads.asterisk.org/pub/security/AST-2009-006.pdf

https://downloads.asterisk.org/pub/security/AST-2009-006.pdf