160 matches found
SUSE CVE-2021-33056
Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...
SUSE CVE-2021-43611
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds in fromheader via a V7 archive in which mtime have approximately 11 whitespace characters. It results in the use of uninitialized memory for a conditional jump. Remediation A fix was pushed into the master branch but not y...
ALPINE-CVE-2022-48303
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...
AZL-37145 CVE-2022-48303 affecting package tar for versions less than 1.34-3
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...
UBUNTU-CVE-2022-48303
GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...
CVE-2021-43611
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...
CVE-2021-43611
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...
CVE-2021-43611
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...
CVE-2021-43610
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header request URI without a parameter in an unauthenticated SIP message, a different issue than CVE-2021-33056...
Design/Logic Flaw
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...
CVE-2021-43611
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...
CVE-2021-43611
CVE-2021-43611 affects Belledonne Belle-sip up to version 5.0.20, where an attacker can cause a crash in applications like Linphone by placing a backslash-quote sequence in the From header display name. Root cause: malformed handling of a display-name field in SIP From headers leading to a crash....
CVE-2021-43611: Improper Resource Shutdown or Release
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...
Belledonne Belle-sip 环境问题漏洞
Belledonne Belle-sip is a library from the French company Belledonne that implements the transport, transaction and conversation layers of SIP RFC 3261. security vulnerabilities exist in versions prior to Belledonne Belle sip 5.0.20, which can be exploited by attackers to crash applications such ...
Belledonne Belle-sip 安全漏洞
Belledonne Belle-sip is a library from the French company Belledonne that implements the transport, transaction and dialog layers of SIP RFC 3261. A security vulnerability exists in Belledonne Belle sip versions prior to 5.0.20, which can be exploited by an attacker to crash an application such a...
CVE-2021-43610: Inconsistent Interpretation of HTTP Requests
Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header request URI without a parameter in an unauthenticated SIP message, a different issue than CVE-2021-33056...
CVE-2021-33056
Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...
