Lucene search
Gentoo FoundationMGASA-2023-0072HistoryFeb 27, 2023 - 11:27 p.m.
Updated sofia-sip packages fix security vulnerability
2023-02-2723:27:16
Gentoo Foundation
advisories.mageia.org
21
sofia-sip
packages
security vulnerability
config_sortlist
input string
stack overflow
denial of service
cve-2022-47516
unix
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
65.5%
The config_sortlist function is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow and thus may cause a denial of service. (CVE-2022-47516)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | sofia-sip | < 1.12.11-10.3 | sofia-sip-1.12.11-10.3.mga8 |
Related
debian
debian
[SECURITY] [DLA 3334-1] sofia-sip security update
2023-02-22 21:41:27
[SECURITY] [DSA 5410-1] sofia-sip
2023-05-24 10:39:40
nessus
nessus
Debian DLA-3334-1 : sofia-sip - LTS security update
2023-02-22 00:00:00
Debian DSA-5410-1 : sofia-sip - security update
2023-05-24 00:00:00
osv
osv
sofia-sip - security update
2023-02-22 00:00:00
CVE-2022-47516
2022-12-18 05:15:11
sofia-sip vulnerabilities
2023-03-07 14:34:13
debiancve
debiancve
CVE-2022-47516
2022-12-18 05:15:11
nvd
nvd
CVE-2022-47516
2022-12-18 05:15:11
ubuntucve
ubuntucve
CVE-2022-47516
2022-12-18 00:00:00
cvelist
cvelist
CVE-2022-47516
2022-12-18 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3334-1)
2023-02-23 00:00:00
Debian: Security Advisory (DSA-5410-1)
2023-05-25 00:00:00
Ubuntu: Security Advisory (USN-5932-1)
2023-03-08 00:00:00
cve
cve
CVE-2022-47516
2022-12-18 05:15:11
prion
prion
Code injection
2022-12-18 05:15:00
ubuntu
ubuntu
Sofia-SIP vulnerabilities
2023-03-07 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.003 Low
EPSS
Percentile
65.5%
Related for MGASA-2023-0072