CVE-2022-47517

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that causes a urlcanonize2 heap-based buffer over-read because of an off-by-one error...

CVE-2022-47517

creationtimestamp| type| source ---|---|--- 2022-12-18 07:40:29+00:00| seen| https://t.me/cibsecurity/54813...

CVE-2022-47517

CVE-2022-47517 affects the libsofia-sip fork used by drachtio-server up to version 0.8.19. The issue is a heap-based buffer over-read in url_canonize2 triggered by a crafted UDP message, due to an off-by-one error, leading to denial of service (daemon crash). Public sources in the connected recor...