Security Advisories

Stay up to date with the latest security advisories for the
Asterisk Project.

AST-2010-002: Dialplan injection vulnerability

February 18, 2010

http://downloads.asterisk.org/pub/security/AST-2010-002.pdf

https://downloads.asterisk.org/pub/security/AST-2010-002.pdf

T.38 Remote Crash Vulnerability

February 2, 2010

http://downloads.asterisk.org/pub/security/AST-2010-001.pdf

https://downloads.asterisk.org/pub/security/AST-2010-001.pdf

RTP Remote Crash Vulnerability

December 8, 2009

http://downloads.asterisk.org/pub/security/AST-2009-010.pdf

https://downloads.asterisk.org/pub/security/AST-2009-010.pdf

Cross-site AJAX request vulnerability

November 4, 2009

http://downloads.asterisk.org/pub/security/AST-2009-009.pdf

https://downloads.asterisk.org/pub/security/AST-2009-009.pdf

SIP responses expose valid usernames

November 4, 2009

http://downloads.asterisk.org/pub/security/AST-2009-008.pdf

https://downloads.asterisk.org/pub/security/AST-2009-008.pdf