CVE-2022-41550

2022-10-1122:15:11

Debian Security Bug Tracker

security-tracker.debian.org

cve-2022-41550

gnu osip

integer overflow

osip_body_parse_header

unix

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

32.2%

JSON

GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header.

OSVersionArchitecturePackageVersionFilename
Debian12alllibosip2< 5.3.0-2.1libosip2_5.3.0-2.1_all.deb
Debian11alllibosip2<= 4.1.0-2.1libosip2_4.1.0-2.1_all.deb
Debian999alllibosip2< 5.3.0-2.1libosip2_5.3.0-2.1_all.deb
Debian13alllibosip2< 5.3.0-2.1libosip2_5.3.0-2.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	libosip2	< 5.3.0-2.1	libosip2_5.3.0-2.1_all.deb
Debian	11	all	libosip2	<= 4.1.0-2.1	libosip2_4.1.0-2.1_all.deb
Debian	999	all	libosip2	< 5.3.0-2.1	libosip2_5.3.0-2.1_all.deb
Debian	13	all	libosip2	< 5.3.0-2.1	libosip2_5.3.0-2.1_all.deb