[Full-disclosure] AST-2014-004: Remote Crash Vulnerability in PJSIP Channel Driver Subscription Handling

Asterisk Project Security Advisory - AST-2014-004 ProductAsterisk SummaryRemote Crash Vulnerability in PJSIP Channel Driver Subscription Handling

[Full-disclosure] AST-2014-002: Denial of Service Through File Descriptor Exhaustion with chan_sip Session-Timers

Asterisk Project Security Advisory - AST-2014-002 ProductAsterisk SummaryDenial of Service Through File Descriptor Exhaustion with chan_sip Session-Timers

[Full-disclosure] AST-2014-003: Remote Crash Vulnerability in PJSIP channel driver

Asterisk Project Security Advisory - AST-2014-003 ProductAsterisk SummaryRemote Crash Vulnerability in PJSIP channel driver Nature of Advisory Denial of Service

[Full-disclosure] AST-2014-001: Stack Overflow in HTTP Processing of Cookie Headers.

Asterisk Project Security Advisory - AST-2014-001 ProductAsterisk SummaryStack Overflow in HTTP Processing of Cookie Headers. Nature of Advisory Denial Of Service

[Full-disclosure] AST-2013-007: Asterisk Manager User Dialplan Permission Escalation

Asterisk Project Security Advisory - AST-2013-007 ProductAsterisk SummaryAsterisk Manager User Dialplan Permission Escalation Nature of Advisory Permission Escalation

[Full-disclosure] AST-2013-006: Buffer Overflow when receiving odd length 16 bit SMS message

Asterisk Project Security Advisory - AST-2013-006 ProductAsterisk SummaryBuffer Overflow when receiving odd length 16 bit SMS message

[Full-disclosure] AST-2013-005: Remote Crash when Invalid SDP is sent in SIP Request

Asterisk Project Security Advisory - AST-2013-005 ProductAsterisk SummaryRemote Crash when Invalid SDP is sent in SIP Request Nature of Advisory Remote Crash

[Full-disclosure] AST-2013-004: Remote Crash From Late Arriving SIP ACK With SDP

Asterisk Project Security Advisory - AST-2013-004 Product Asterisk Summary Remote Crash From Late Arriving SIP ACK With SDP Nature of Advisory Remote Crash

[Full-disclosure] AST-2013-003: Username disclosure in SIP channel driver

Asterisk Project Security Advisory - AST-2013-003 Product Asterisk Summary Username disclosure in SIP channel driver Nature of Advisory Unauthorized data disclosure

[Full-disclosure] AST-2013-002: Denial of Service in HTTP server

Asterisk Project Security Advisory - AST-2013-002 Product Asterisk Summary Denial of Service in HTTP server Nature of Advisory Denial of Service

[Full-disclosure] AST-2013-001: Buffer Overflow Exploit Through SIP SDP Header

Asterisk Project Security Advisory - AST-2013-001 Product Asterisk Summary Buffer Overflow Exploit Through SIP SDP Header Nature of Advisory Exploitable Stack Buffer Overflow

[Full-disclosure] AST-2012-015: Denial of Service Through Exploitation of Device State Caching

Asterisk Project Security Advisory - AST-2012-015 ProductAsterisk SummaryDenial of Service Through Exploitation of Device State Caching

[Full-disclosure] AST-2012-014: Crashes due to large stack allocations when using TCP

Asterisk Project Security Advisory - AST-2012-014 ProductAsterisk SummaryCrashes due to large stack allocations when using TCP

[Full-disclosure] AST-2012-013: ACL rules ignored when placing outbound calls by certain IAX2 users

Asterisk Project Security Advisory - AST-2012-013 ProductAsterisk SummaryACL rules ignored when placing outbound calls by certain IAX2 users

[Full-disclosure] AST-2012-012: Asterisk Manager User Unauthorized Shell Access

Asterisk Project Security Advisory - AST-2012-012 Product Asterisk Summary Asterisk Manager User Unauthorized Shell Access Nature of Advisory Permission Escalation

[Full-disclosure] AST-2012-011: Remote crash vulnerability in voice mail application

Asterisk Project Security Advisory - AST-2012-011 ProductAsterisk SummaryRemote crash vulnerability in voice mail application Nature of Advisory Denial of Service

[Full-disclosure] AST-2012-010: Possible resource leak on uncompleted re-invite transactions

Asterisk Project Security Advisory - AST-2012-010 ProductAsterisk SummaryPossible resource leak on uncompleted re-invite transactions

[Full-disclosure] AST-2012-009: Skinny Channel Driver Remote Crash Vulnerability

Asterisk Project Security Advisory - AST-2012-009 Product Asterisk Summary Skinny Channel Driver Remote Crash Vulnerability Nature of Advisory Denial of Service

[Full-disclosure] AST-2012-008: Skinny Channel Driver Remote Crash Vulnerability

Asterisk Project Security Advisory - AST-2012-008 Product Asterisk Summary Skinny Channel Driver Remote Crash Vulnerability Nature of Advisory Denial of Service

[Full-disclosure] AST-2012-007: Remote crash vulnerability in IAX2 channel driver.

Asterisk Project Security Advisory - AST-2012-007 ProductAsterisk SummaryRemote crash vulnerability in IAX2 channel driver. Nature of Advisory Remote crash

[Full-disclosure] AST-2012-006: Remote Crash Vulnerability in SIP Channel Driver

Asterisk Project Security Advisory - AST-2012-006 Product Asterisk Summary Remote Crash Vulnerability in SIP Channel Driver Nature of Advisory Remote Crash

[Full-disclosure] AST-2012-005: Heap Buffer Overflow in Skinny Channel Driver

Asterisk Project Security Advisory - AST-2012-005 Product Asterisk Summary Heap Buffer Overflow in Skinny Channel Driver Nature of Advisory Exploitable Heap Buffer Overflow

[Full-disclosure] AST-2012-004: Asterisk Manager User Unauthorized Shell Access

Asterisk Project Security Advisory - AST-2012-004 Product Asterisk Summary Asterisk Manager User Unauthorized Shell Access Nature of Advisory Permission Escalation

[Full-disclosure] AST-2012-003: Stack Buffer Overflow in HTTP Manager

Asterisk Project Security Advisory - AST-2012-003 Product Asterisk Summary Stack Buffer Overflow in HTTP Manager Nature of Advisory Exploitable Stack Buffer Overflow

[Full-disclosure] AST-2012-002: Remote Crash Vulnerability in Milliwatt Application

Asterisk Project Security Advisory - AST-2012-002 ProductAsterisk SummaryRemote Crash Vulnerability in Milliwatt Application Nature of Advisory Exploitable Stack Buffer Overflow with locally

AST-2011-014: Remote crash possibility with SIP and the “automon” feature enabled

Asterisk Project Security Advisory - AST-2011-014 ProductAsterisk SummaryRemote crash possibility with SIP and the "automon" feature enabled

[Full-disclosure] AST-2011-013: Possible remote enumeration of SIP endpoints with differing NAT settings

Asterisk Project Security Advisory - AST-2011-013 ProductAsterisk SummaryPossible remote enumeration of SIP endpoints with differing NAT settings

[Full-disclosure] AST-2011-012: Remote crash vulnerability in SIP channel driver

Asterisk Project Security Advisory - AST-2011-012 Product Asterisk Summary Remote crash vulnerability in SIP channel driver Nature of Advisory Remote crash

[Full-disclosure] AST-2011-011: Possible enumeration of SIP users due to differing authentication responses

Asterisk Project Security Advisory - AST-2011-011 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2011-006: Asterisk Manager User Shell Access

Asterisk Project Security Advisory - AST-2011-006 ProductAsterisk SummaryAsterisk Manager User Shell Access Nature of Advisory Permission Escalation

[Full-disclosure] AST-2011-005: File Descriptor Resource Exhaustion

Asterisk Project Security Advisory - AST-2011-005 Product Asterisk Summary File Descriptor Resource Exhaustion Nature of Advisory Denial of Service

[Full-disclosure] AST-2011-004:

ProductAsterisk SummaryRemote crash vulnerability in TCP/TLS server Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions

[Full-disclosure] AST-2011-003:

ProductAsterisk SummaryResource exhaustion in Asterisk Manager Interface Nature of Advisory Denial of Service Susceptibility Remote Unauthenticated Sessions if manag

[Full-disclosure] AST-2011-002: Multiple array overflow and crash vulnerabilities in UDPTL code

Asterisk Project Security Advisory - AST-2011-002 Product Asterisk Summary Multiple array overflow and crash vulnerabilities in UDPTL code

[Full-disclosure] AST-2011-001: Stack buffer overflow in SIP channel driver

Asterisk Project Security Advisory - AST-2011-001 ProductAsterisk SummaryStack buffer overflow in SIP channel driver Nature of Advisory Exploitable Stack Buffer Overflow

[Full-disclosure] AST-2010-003: Invalid parsing of ACL rules can compromise security

Asterisk Project Security Advisory - AST-2010-003 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2010-002: Dialplan injection vulnerability

Asterisk Project Security Advisory - AST-2010-002 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2010-001: T.38 Remote Crash Vulnerability

Asterisk Project Security Advisory - AST-2010-001 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2009-010: RTP Remote Crash Vulnerability

Asterisk Project Security Advisory - AST-2009-010 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2009-009: Cross-site AJAX request vulnerability

Asterisk Project Security Advisory - AST-2009-009 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2009-008: SIP responses expose valid usernames

Asterisk Project Security Advisory - AST-2009-008 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2009-007: ACL not respected on SIP INVITE

Asterisk Project Security Advisory - AST-2009-007 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2009-006: IAX2 Call Number Resource Exhaustion

Asterisk Project Security Advisory - AST-2009-006 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2009-005: Remote Crash Vulnerability in SIP channel driver

Asterisk Project Security Advisory - AST-2009-005 ++ | Product | Asterisk | |-+--|

[Full-disclosure] AST-2009-004: Remote Crash Vulnerability in RTP stack

Asterisk Project Security Advisory - AST-2009-004 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2009-003: SIP responses expose valid usernames

Asterisk Project Security Advisory - AST-2009-003 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2009-002: Remote Crash Vulnerability in SIP channel driver

Asterisk Project Security Advisory - AST-2009-002 ++ | Product | Asterisk | |-+--|

[Full-disclosure] AST-2009-001: Information leak in IAX2 authentication

Asterisk Project Security Advisory - AST-2009-001 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2008-012: Remote crash vulnerability in IAX2

Asterisk Project Security Advisory - AST-2008-012 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2008-011: Traffic amplification in IAX2 firmware provisioning system

Asterisk Project Security Advisory - AST-2008-011 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2008-010: Asterisk IAX 'POKE' resource exhaustion

Asterisk Project Security Advisory - AST-2008-010 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2008-009: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised

Asterisk Project Security Advisory - AST-2008-009 ++ | Product | Asterisk-Addons | |+---|

[Full-disclosure] AST-2008-009: (Corrected subject) Remote crash vulnerability in ooh323 channel driver

Asterisk Project Security Advisory - AST-2008-009 ++ | Product | Asterisk-Addons | |+---|

[Full-disclosure] AST-2008-008: Remote Crash Vulnerability in SIP channel driver when run in pedantic mode

Asterisk Project Security Advisory - AST-2008-008 ++ | Product | Asterisk | |+---|

[Full-disclosure] /home/putnopvut/asa/AST-2008-007/AST-2008-007: AST-2008-007 Cryptographic keys generated by OpenSSL on Debian-based systems compromised

Asterisk Project Security Advisory - AST-2008-007 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2008-002: Two buffer overflows in RTP Codec Payload Handling

Asterisk Project Security Advisory - AST-2008-002 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2008-003: Unauthenticated calls allowed from SIP channel driver

Asterisk Project Security Advisory - AST-2008-003 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2008-005: HTTP Manager ID is predictable

Asterisk Project Security Advisory - AST-2008-005 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2008-004: Format String Vulnerability in Logger and Manager

Asterisk Project Security Advisory - AST-2008-004 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2008-001: Crash from transfer using BYE with Also header

Asterisk Project Security Advisory - AST-2008-001 ++ | Product | Asterisk | |-+---

[Full-disclosure] AST-2007-025 - SQL Injection issue in res_config_pgsql

Asterisk Project Security Advisory - AST-2007-025 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2007-026 - SQL Injection issue in cdr_pgsql

Asterisk Project Security Advisory - AST-2007-026 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2007-026 - SQL Injection issue in cdr_pgsql

Asterisk Project Security Advisory - AST-2007-026 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2007-025 - SQL Injection issue in res_config_pgsql

Asterisk Project Security Advisory - AST-2007-025 ++ | Product| Asterisk| |--+-|

[Full-disclosure] AST-2007-023 - SQL Injection Vulnerabilty in cdr_addon_mysql

Asterisk Project Security Advisory - AST-2007-023 ++ | Product | Asterisk-Addons | |+---|

[Full-disclosure] AST-2007-021: Crash from invalid/corrupted MIME bodies when using voicemail with IMAP storage

Asterisk Project Security Advisory - AST-2007-021 ++ | Product | Asterisk | |+---|

[Full-disclosure] AST-2007-020: Resource Exhaustion Vulnerability in Asterisk SIP channel driver

Asterisk Project Security Advisory - AST-2007-020 ++ | Product | Asterisk | |+---|