Lucene search

K
mageiaGentoo FoundationMGASA-2023-0209
HistoryJun 28, 2023 - 8:21 a.m.

Updated sofia-sip packages fix security vulnerability

2023-06-2808:21:41
Gentoo Foundation
advisories.mageia.org
28
security vulnerability
sofia-sip
oob read
integer-overflow
crash
high memory consumption
serious consequences
cve-2023-32307
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

43.2%

The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. (CVE-2023-32307)

OSVersionArchitecturePackageVersionFilename
Mageia8noarchsofia-sip< 1.12.11-10.4sofia-sip-1.12.11-10.4.mga8

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

43.2%