1108 matches found
SUSE CVE-2026-31427
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...
CVE-2026-31427
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...
CVE-2026-31427
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...
CVE-2026-31427
The CVE-2026-31427 issue in Linux kernel netfilter/nf_conntrack_sip was fixed by initializing the rtp_addr before calling nf_nat_sip SDP hooks and tracking via a have_rtp_addr flag. If SDP has no m= lines, or contains only inactive/unrecognized media, the code now avoids calling sdp_session with ...
CVE-2026-31427 netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp
In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsip sdpsession hook after walking the SDP media descriptions. However...
Linux Distros Unpatched Vulnerability : CVE-2026-31427
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nfconntracksip: fix use of uninitialized rtpaddr in processsdp processsdp declares union nfinetaddr rtpaddr on the stack and passes it to the nfnatsi...
PT-2026-32353
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the netfilter module, the process sdp function declares a union nf inet addr named rtp addr on the stack. This variable is only initialized when a recognized media type with a non-zer...
Linux Distros Unpatched Vulnerability : CVE-2026-33069
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in...
USN-8122-1 pjproject vulnerabilities
Youngsung Kim discovered that PJSIP did not properly parse numeric header fields in SIP messages. A remote attacker could use this issue to cause PJSIP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2017-16872 Peter...
CVE-2026-33069
A flaw was found in PJSIP, a multimedia communication library. A remote attacker could exploit a vulnerability in the pjsipmultipartparse function when processing incoming Session Initiation Protocol SIP messages. This flaw, an out-of-bounds heap read, allows for the disclosure of a small amount ...
CVE-2026-33069 PJSIP has an Out-of-bounds Read in SIP multipart parsing
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsipmultipartparse. After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This...
EUVD-2026-13632
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsipmultipartparse. After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This...
CVE-2026-33069 PJSIP has an Out-of-bounds Read in SIP multipart parsing
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsipmultipartparse. After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This...
CVE-2026-33069
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsipmultipartparse. After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This...
PT-2026-26586
PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsip multipart parse. After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This...
GHSA-434X-W66G-QW3R vulnerabilities
Vulnerabilities for packages: linkerd-await, lychee, py3-xet-core, zed, sdp-k8s-injector, oranda, wizer, zola, ztunnel, samply, linkerd2, buck2, linkerd-network-validator, linkerd-extension-init, efs-utils, helix, nushell, parseable, sccache, sqlx, rustup, kdash, wasmtime, mdbook, yazi, deno,...
CVE-2026-25541 vulnerabilities
Vulnerabilities for packages: linkerd-await, lychee, py3-xet-core, zed, sdp-k8s-injector, oranda, wizer, zola, ztunnel, samply, linkerd2, buck2, linkerd-network-validator, linkerd-extension-init, efs-utils, helix, nushell, parseable, sccache, sqlx, rustup, kdash, wasmtime, mdbook, yazi, deno,...
GHSA-434X-W66G-QW3R vulnerabilities
Vulnerabilities for packages: jujutsu, pixi, komodo, wizer, bootc, py3-xet-core, wadm, deno, linkerd-network-validator, pgcat, linkerd-extension-init, lychee, yazi, oranda, samply, rustup, uv, zed, sqlx, topgrade, sdp-k8s-injector, linkerd2-cni-plugin, linkerd2-proxy, efs-utils, wash, wasmcloud,...
CVE-2026-25541 vulnerabilities
Vulnerabilities for packages: jujutsu, pixi, komodo, wizer, bootc, py3-xet-core, wadm, deno, linkerd-network-validator, pgcat, linkerd-extension-init, lychee, yazi, oranda, samply, rustup, uv, zed, sqlx, topgrade, sdp-k8s-injector, linkerd2-cni-plugin, linkerd2-proxy, efs-utils, wash, wasmcloud,...
CVE-2025-68136
EVerest is an EV charging software stack. Prior to version 2025.10.0, once the module receives a SDP request, it creates a whole new set of objects like Session, IConnection which open new TCP socket for the ISO15118-20 communications and registers callbacks for the created file descriptor, witho...