Design/Logic Flaw

2024-02-0518:15:00

PRIOn knowledge base

www.prio-n.com

use-after-free flaw

sip subscribe logic

logic flaw

version 1.0.0

vulnerability

7.6 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

media-server v1.0.0 was discovered to contain a Use-After-Free (UAF) vulnerability via the sip_subscribe_remove function at /uac/sip-uac-subscribe.c.

CPENameOperatorVersion
media-servereq1.0.0

CPE	Name	Operator	Version
	media-server	eq	1.0.0

References

github.com/yinluming13579/media-server_defects/blob/main/media-server_1.md