SUSE CVE-2008-2119

Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3, when pedantic parsing aka pedanticsipchecking is enabled, allows remote attackers to cause a denial of service daemon crash via a SIP INVITE message that lacks a From header, related to...

SUSE CVE-2014-2957

The dmarcprocess function in dmarc.c in Exim before 4.82.1, when EXPERIMENTALDMARC is enabled, allows remote attackers to execute arbitrary code via the From header in an email, which is passed to the expandstring function...

SUSE CVE-2019-16056

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email addresses that contain multiple @ characters. An application that uses the email module and implements some kind of checks on the From/To header...

SUSE CVE-2020-12397

By encoding Unicode whitespace characters within the From email header, an attacker can spoof the sender email address that Thunderbird displays. This vulnerability affects Thunderbird 68.8.0...

SUSE CVE-2021-33056

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...

SUSE CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds in fromheader via a V7 archive in which mtime have approximately 11 whitespace characters. It results in the use of uninitialized memory for a conditional jump. Remediation A fix was pushed into the master branch but not y...

ALPINE-CVE-2022-48303

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...

AZL-37145 CVE-2022-48303 affecting package tar for versions less than 1.34-3

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...

UBUNTU-CVE-2022-48303

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

Design/Logic Flaw

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

CVE-2021-43610

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header request URI without a parameter in an unauthenticated SIP message, a different issue than CVE-2021-33056...

CVE-2021-43610

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header request URI without a parameter in an unauthenticated SIP message, a different issue than CVE-2021-33056...

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

CVE-2021-43611

CVE-2021-43611 affects Belledonne Belle-sip up to version 5.0.20, where an attacker can cause a crash in applications like Linphone by placing a backslash-quote sequence in the From header display name. Root cause: malformed handling of a display-name field in SIP From headers leading to a crash....

CVE-2021-43611

Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a From header...

PT-2021-23890

Name of the Vulnerable Software and Affected Versions: Belledonne Belle-sip versions prior to 5.0.20 Description: The issue allows applications such as Linphone to crash when a specific character, , is present in the display name of a From header. Recommendations: For versions prior to 5.0.20,...