Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-07602
HistoryNov 23, 2022 - 12:00 a.m.

drachtio-server memory mis-reference vulnerability

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
drachtio-server
sip server
sofia sip stack
memory misquoting
vulnerability
request-handler.cpp
arbitrary code
cnvd

EPSS

0.002

Percentile

57.1%

drachtio-server is a SIP server built on the sofia SIP stack by drachtio open source. drachtio drachtio-server version 0.8.18 is vulnerable to a memory misquoting vulnerability that stems from the request-handler.cpp component receiving requests when the event The _cb instruction responsible for freeing memory is garbled. An attacker could exploit the vulnerability to execute arbitrary code.

EPSS

0.002

Percentile

57.1%

Related for CNVD-2023-07602