Mandriva Linux Security Advisory 2015-018 - Double free vulnerability in the WebSocket Server (res_http_websocket module) in Asterisk Open Source 11.x before 11.14.2 allows remote attackers to cause a denial of service by sending a zero length frame after a non-zero length frame.
0b48cd6cd2f94aa7f8e23c4350348a2336dee0bef3270aceae888cce5c9c8368
Gentoo Linux Security Advisory 201412-51 - Multiple vulnerabilities have been found in Asterisk, the worst of which could lead to Denial of Service, bypass intended ACL restrictions or allow an authenticated user to gain escalated privileges. Versions less than 11.14.2 are affected.
04044181d0958586da94e04aa40876aa0b3112da38bf0c87d7e7ea0eb5d041f0