Asterisk Project Security Advisory – AST-2015-003 ProductAsterisk SummaryTLS Certificate Common name NULL byte exploit Nature of AdvisoryMan in the Middle AttackSusceptibilityRemote Authenticated Sessions Severity Major Exploits KnownNone Reported O..
Author : Asterisk Security
Asterisk Project Security Advisory – AST-2015-002 ProductAsterisk SummaryMitigation for libcURL HTTP request injection vulnerability Nature of AdvisoryHTTP request injectionSusceptibilityRemote Authenticated Sessions Severity Major Exploits KnownNo Repor..
Asterisk Project Security Advisory – AST-2015-001 ProductAsterisk SummaryFile descriptor leak when incompatible codecs are offered Nature of AdvisoryResource exhaustion SusceptibilityRemote Authenticated Sessions Severity Major Exploits KnownNo Repor..
Asterisk Project Security Advisory – AST-2014-019 ProductAsterisk SummaryRemote Crash Vulnerability in WebSocket ServerNature of AdvisoryDenial of Service SusceptibilityRemote Unauthenticated Sessions Severity ModerateExploits KnownNo Reported On30 Octo..
Asterisk Project Security Advisory – AST-2014-018 ProductAsterisk SummaryAMI permission escalation through DB dialplan functionNature of AdvisoryPermission Escalation SusceptibilityRemote Authenticated Sessions Severity Minor Exploits KnownNo Repor..
Asterisk Project Security Advisory – AST-2014-017 ProductAsterisk SummaryPermission escalation through ConfBridgeactions/dialplan functionsNature of AdvisoryPermission Escalation SusceptibilityRemote Authenticated Sessions Severity Minor Exploits Know..
Asterisk Project Security Advisory – AST-2014-016 ProductAsterisk SummaryRemote Crash Vulnerability in PJSIP channel driverNature of AdvisoryDenial of Service SusceptibilityRemote Unauthenticated Sessions Severity CriticalExploits KnownNo Reported O..
Asterisk Project Security Advisory – AST-2014-015 ProductAsterisk SummaryRemote Crash Vulnerability in PJSIP channel driverNature of AdvisoryDenial of Service SusceptibilityRemote Unauthenticated Sessions Severity ModerateExploits KnownNo Reported O..
Asterisk Project Security Advisory – AST-2014-014 ProductAsterisk SummaryHigh call load may result in hung channels in ConfBridge. Nature of AdvisoryDenial of Service SusceptibilityRemote Unauthenticated Sessions Severity ModerateExploits KnownNo Repor..
Asterisk Project Security Advisory – AST-2014-013 ProductAsterisk SummaryPJSIP ACLs are not loaded on startupNature of AdvisoryUnauthorized Access SusceptibilityRemote unauthenticated sessions Severity ModerateExploits KnownNo Reported On28 Octob..