[SECURITY] [DLA 1439-1] resiprocate security update

Package : resiprocate Version : 1:1.9.7-5+deb8u1 CVE ID : CVE-2017-11521 CVE-2018-12584 CVE-2018-12584 A flaw in function ConnectionBase::preparseNewBytes of resip/stack/ConnectionBase.cxx has been detected, that allows remote attackers to cause a denial of service buffer overflow or possibly...

Debian: Security Advisory (DLA-1439-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DLA-1439-1 resiprocate - security update

Bulletin has no description...

reSIProcate Denial of Service Vulnerability

reSIProcate is a C++ implementation of protocols such as SIP Session Initiation Protocol, ICE P2P Communication Protocol and TURN Profile Transfer Protocol. A security vulnerability exists in the 'ConnectionBase::prepareNewBytes' function in the resip/stack/ConnectionBase.cxx file in reSIProcate...

UBUNTU-CVE-2018-12584

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...

CVE-2018-12584

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...

resiprocate/fuzzStack: Heap-buffer-overflow in resip::ParseBuffer::qVal

Project: https://github.com/resiprocate/resiprocate.git Detailed report: https://oss-fuzz.com/testcase?key=6234261284716544 Project: resiprocate Fuzzer: aflresiprocatefuzzStack Fuzz target binary: fuzzStack Job Type: aflasanresiprocate Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

Debian: Security Advisory (DLA-1040-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-9454

Buffer overflow in the aresparseareply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds-read via a crafted DNS response...

Buffer overflow

Buffer overflow in the aresparseareply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds-read via a crafted DNS response...

CVE-2017-9454

Buffer overflow in the aresparseareply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds-read via a crafted DNS response...

CVE-2017-9454

Buffer overflow in the aresparseareply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service out-of-bounds-read via a crafted DNS response...

CVE-2017-9454

The CVE-2017-9454 issue is a buffer overflow in the ares_parse_a_reply function of the embedded ares library used by ReSIProcate, with versions prior to 1.12.0 vulnerable. A crafted DNS response can trigger an out-of-bounds read, leading to a denial of service. Public references from multiple sou...

CVE-2017-9454

Removed by vendor...

reSIProcate 'SdpContents::Session::Medium::parse' function denial of service vulnerability

reSIProcate is a C++ implementation of protocols such as SIP Session Initiation Protocol, ICE P2P Communication Protocol and TURN Profile Transfer Protocol. A security vulnerability exists in the 'SdpContents::Session::Medium::parse' function of the resip/stack/SdpContents.cxx file in reSIProcate...

Debian DLA-1040-1 : resiprocate security update

CVE-2017-11521 The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections. For Debian 7 'Wheezy', these problems have been fixed in version...

[SECURITY] [DLA 1040-1] resiprocate security update

Package : resiprocate Version : 1.8.5-4+deb7u1 CVE ID : CVE-2017-11521 CVE-2017-11521 The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...

DLA-1040-1 resiprocate - security update

Bulletin has no description...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...

CVE-2017-11521

The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...