The Asterisk Development Team has announced security releases for
Certified Asterisk 13.13 and Asterisk 13 and 14. The available
security releases are released as versions 13.13-cert4, 13.15.1, and
14.4.1.
These releases are available for immediate download at
Asterisk Project Security Advisory - AST-2017-002
ProductAsterisk
SummaryBuffer Overrun in PJSIP transaction layer
Nature of Advisory Buffer Overrun/Crash
Asterisk Project Security Advisory - AST-2017-003
ProductAsterisk
SummaryCrash in PJSIP multi-part body parser
Nature of Advisory Remote Crash
Asterisk Project Security Advisory - AST-2017-004
Product Asterisk
Summary Memory exhaustion on short SCCP packets
Nature of Advisory Denial of Service