CVE-2017-14603: Exposure of Sensitive Information to an Unauthorized Actor

In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the "nat" and "symmetricrtp" options allow...

CVE-2017-14603

In Asterisk 11.x before 11.25.3, 13.x before 13.17.2, and 14.x before 14.6.2 and Certified Asterisk 11.x before 11.6-cert18 and 13.x before 13.13-cert6, insufficient RTCP packet validation could allow reading stale buffer contents and when combined with the "nat" and "symmetricrtp" options allow...

PT-2017-13574

Name of the Vulnerable Software and Affected Versions Asterisk versions 11.x through 11.25.2 Asterisk versions 13.x through 13.17.1 Asterisk versions 14.x through 14.6.1 Certified Asterisk versions 11.x through 11.6-cert17 Certified Asterisk versions 13.x through 13.13-cert5 Description The issue...