CVE-2023-27598

creationtimestamp| type| source ---|---|--- 2023-03-15 23:30:09+00:00| seen| https://t.me/cibsecurity/60091...

CVE-2023-27598

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed Via header to OpenSIPS triggers a segmentation fault when the function calctagsuffix is called. A specially crafted Via header, which is deemed correct by the parser, will...

CVE-2023-27598

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed Via header to OpenSIPS triggers a segmentation fault when the function calctagsuffix is called. A specially crafted Via header, which is deemed correct by the parser, will...

CVE-2023-27598

OpenSIPS vulnerable before 3.1.7 and 3.2.4: sending a malformed Via header triggers a segmentation fault in calc_tag_suffix, passing uninitialized strings to MD5StringArray and causing a crash (DoS). Exploitation requires no special privileges beyond triggering the vulnerable code; complete impac...

CVE-2023-27598 OpenSIPS has vulnerability in the parse_via() function

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed Via header to OpenSIPS triggers a segmentation fault when the function calctagsuffix is called. A specially crafted Via header, which is deemed correct by the parser, will...