Asterisk Project Security Advisory – AST-2019-001 ProductAsterisk SummaryRemote crash vulnerability with SDP protocol violation Nature of AdvisoryDenial Of Service SusceptibilityRemote Authenticated Sessions Severity Low Exploits KnownNo Reported OnJanu..
Author : Asterisk Security
Asterisk Project Security Advisory – AST-2018-008 ProductAsterisk SummaryPJSIP endpoint presence disclosure when using ACL Nature of AdvisoryUnauthorized data disclosure SusceptibilityRemote Unauthenticated Sessions Severity Minor Exploits KnownNo Repor..
Asterisk Project Security Advisory – AST-2018-007 ProductAsterisk SummaryInfinite loop when reading iostreams Nature of AdvisoryDenial of Service SusceptibilityRemote Authenticated Sessions Severity Critical Exploits KnownNo Reported OnApril 16, 2..
Asterisk Project Security Advisory – AST-2018-003 ProductAsterisk SummaryCrash with an invalid SDP fmtp attributeNature of AdvisoryRemote crashSusceptibilityRemote Authenticated Sessions Severity Minor Exploits KnownNo Reported OnJanuary 15, 2018 Repor..
Asterisk Project Security Advisory – AST-2018-002 ProductAsterisk SummaryCrash when given an invalid SDP media formatdescription Nature of AdvisoryRemote crashSusceptibilityRemote Authenticated Sessions Severity Minor Exploits KnownNo Reported OnJanu..
Asterisk Project Security Advisory – AST-2017-014 ProductAsterisk SummaryCrash in PJSIP resource when missing a contactheaderNature of AdvisoryRemote CrashSusceptibilityRemote Unauthenticated Sessions Severity ModerateExploits KnownNo Reported OnDecem..
The Asterisk Development Team has announced security releases for Certified Asterisk 13.13 and Asterisk 13, 14 and 15.The available security releases are released as versions 13.13-cert8, 13.18.3,14.7.3 and 15.1.3.These releases are available for immedi..
Asterisk Project Security Advisory – AST-2017-011 ProductAsterisk SummaryMemory leak in pjsip session resource Nature of AdvisoryMemory leak SusceptibilityRemote Sessions Severity Minor Exploits KnownNo Reported OnOctober 15, 2017 Reported ByCorrey FarrellPos..
Asterisk Project Security Advisory – AST-2017-007 ProductAsterisk SummaryRemote Crash Vulerability in res_pjsipNature of AdvisoryDenial of Service SusceptibilityRemote Unauthenticated Sessions Severity ModerateExploits KnownNo Reported OnAugust 30, 2..
Asterisk Project Security Advisory – AST-2017-005 ProductAsterisk SummaryMedia takeover in RTP stack Nature of AdvisoryUnauthorized data disclosureSusceptibilityRemote Unauthenticated Sessions Severity CriticalExploits KnownNo Reported OnMay 17, 2..