65 matches found
Denial of Service (DoS)
Overview Affected versions of this package are vulnerable to Denial of Service DoS. The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...
CVE-2017-11521
The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...
Design/Logic Flaw
The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...
CVE-2017-11521
The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...
UBUNTU-CVE-2017-11521
The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...
CVE-2017-11521
The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...
CVE-2017-11521
CVE-2017-11521 concerns resiprocate's SdpContents::Session::Medium::parse in reSIProcate 1.10.2, allowing remote denial of service via memory growth when many media connections are triggered. Related CVE-2018-12584 affects ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx, enabli...
CVE-2017-11521: Uncontrolled Resource Consumption
The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service memory consumption by triggering many media connections...
resiprocate: Heap-buffer-overflow in ares_mkquery
Project: https://github.com/resiprocate/resiprocate.git Detailed report: https://oss-fuzz.com/testcase?key=5471786512678912 Project: resiprocate Fuzzer: aflresiprocatearesfuzzname Fuzz target binary: aresfuzzname Job Type: aflasanresiprocate Platform Id: linux Crash Type: Heap-buffer-overflow WRI...
reSIProcate 1.3.2 - Remote Denial of Service PoC
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Remote DoS in reSIProcate MU-200807-01 July 10, 2008 http://labs.mudynamics.com/advisories.html Affected Products/Versions: repro SIP proxy/registrar 1.3.2 http://www.resiprocate.org/ReSIProcate1.3.2Release Any produ...
Design/Logic Flaw
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...
CVE-2008-3210
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI,...
CVE-2008-3210
The CVE-2008-3210 entry concerns ReSIProcate 1.3.2 (rutil/dns/DnsStub.cxx). The issue is a denial-of-service condition: remote attackers can trigger a daemon crash by sending SIP requests (INVITE or OPTIONS) with an excessively long domain name in the request URI, which causes an assert failure. ...
CVE-2008-3210
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...
CVE-2008-3210: Improper Input Validation
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service daemon crash via a SIP 1 INVITE or 2 OPTIONS message with a long domain name in a request URI, which triggers an assert error...
Code injection
Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service stack consumption via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."...
CVE-2008-3199
Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service stack consumption via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."...
CVE-2008-3199
CVE-2008-3199 concerns multiple unspecified vulnerabilities in ReSIProcate prior to 1.3.4 that allow remote attackers to cause a denial of service (stack consumption) through unknown network traffic characterized by a large bytes-in-memory/bytes-on-wire ratio. The affected product is ReSIProcate;...
CVE-2008-3199: Improper Input Validation
Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service stack consumption via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."...