Asterisk Multiple Vulnerbilities

Multiple vulnerabilities have been identified in Asterisk, which can be exploited by malicious people to bypass certain security restrictions, cause a DoS (Denial of Service), and compromise a vulnerable system.

1. Some errors related to VoIP channel drivers, DUNDi, and AMI can lead to a bypass of certain ACL rules.
2. A race condition error within the chan_pjsip channel driver when handling actions related to SIP sessions can be exploited to cause a crash.
3. An error within the CONFBRIDGE dialplan function and DB dialplan function when used from external protocols can be exploited to gain otherwise restricted privileges and subsequently e.g. run arbitrary system commands.