Lucene search

K
osvGoogleOSV:CVE-2022-47517
HistoryDec 18, 2022 - 5:15 a.m.

CVE-2022-47517

2022-12-1805:15:11
Google
osv.dev
1
libsofia-sip
drachtio-server
denial of service
udp message
heap-based buffer over-read

AI Score

7

Confidence

High

EPSS

0.007

Percentile

80.9%

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that causes a url_canonize2 heap-based buffer over-read because of an off-by-one error.

AI Score

7

Confidence

High

EPSS

0.007

Percentile

80.9%

Related for OSV:CVE-2022-47517