AST-2019-007: AMI user could execute system commands.

2019-11-22 Thread Asterisk Security Team
Asterisk Project Security Advisory - AST-2019-007 ProductAsterisk SummaryAMI user could execute system commands. Nature of Advisory Remote Code Execution

AST-2019-008: Re-invite with T.38 and malformed SDP causes crash.

2019-11-22 Thread Asterisk Security Team
Asterisk Project Security Advisory - ProductAsterisk SummaryRe-invite with T.38 and malformed SDP causes crash. Nature of Advisory Remote Crash

AST-2019-006: SIP request can change address of a SIP peer.

2019-11-22 Thread Asterisk Security Team
Asterisk Project Security Advisory - AST-2019-006 ProductAsterisk SummarySIP request can change address of a SIP peer. Nature of Advisory Denial of Service