WS-2026-0041

SctpSackChunk.ParseChunk reads the numGapAckBlocks and numDuplicateTSNs fields, each up to 65535, directly from an attacker-controlled SCTP SACK chunk and loops that many times reading four bytes per iteration, with no validation of the counts against the chunk length or the receive buffer. A...

GHSA-JWJP-4649-V8JP SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing

Summary SctpSackChunk.ParseChunk reads the numGapAckBlocks and numDuplicateTSNs fields each up to 65535 directly from an attacker-controlled SCTP SACK chunk and loops that many times reading 4 bytes per iteration, with no validation of the counts against the chunk length or the receive buffer. A...

SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing

Summary SctpSackChunk.ParseChunk reads the numGapAckBlocks and numDuplicateTSNs fields each up to 65535 directly from an attacker-controlled SCTP SACK chunk and loops that many times reading 4 bytes per iteration, with no validation of the counts against the chunk length or the receive buffer. A...

Error installing BEM – System.IndexOutOfRangeException: Index was outside the bounds of the array

Challenge Cause As indicated by this line in the error message "VmEMSetup.Dialogs.VMEMDialogAddConfig.EnumSSLCertificates", there is an issue parsing certificates with an empty Subject field, and they will need to be removed. The offending certificates are not self-signed because they are generat...