Gentoo Linux Security Advisory 201110-21 - Multiple vulnerabilities in Asterisk might allow unauthenticated remote attackers to execute arbitrary code. Versions less than 1.8.7.1 are affected.
ae5d5c2b8906b69d1e116e6371311677f87ac873f436e84744aa53590ae850cd
Debian Linux Security Advisory 2225-1 - Several vulnerabilities have been discovered in Asterisk, an Open Source PBX and telephony toolkit.
bd5456aa88bf9875926ee1fefd31e522da42c5cce7535683847404db3202ada9
Asterisk Project Security Advisory - On systems that have the Asterisk Manager Interface, Skinny, SIP over TCP, or the built in HTTP server enabled, it is possible for an attacker to open as many connections to asterisk as he wishes. This will cause Asterisk to run out of available file descriptors and stop processing any new calls. Additionally, disk space can be exhausted as Asterisk logs failures to open new file descriptors.
471ce01d238810bef4b672c13bed60968aa25283433c449bf7c0a05b6b29d2ae