CLEANSTART-2023-VH35592 Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

Security vulnerability affects the sofia-sip package. Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library...

CLEANSTART-2023-GU96600 Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

Security vulnerability affects the sofia-sip package. Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library...

CLEANSTART-2023-QK46817 Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

Security vulnerability affects the sofia-sip package. Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library...

CLEANSTART-2023-SA01744 Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification

Security vulnerability affects the sofia-sip package. Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification...

Integer overflow

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to GHSA-8599-x7rq-fr54, several other potential heap-over-flow and integer-overflow in stunparseattrerrorcode and stunparseattruint32 were found because the lack of attributes length check...

CVE-2023-32307

Sofia-SIP (SIP UAs) has CVE-2023-32307 describing multiple vulnerabilities in STUN packet handling, including heap overflow and OOB read caused by missing attributes length checks. Attacks could crash or cause high memory usage; these issues were addressed in version 1.13.15, with upgrades advise...

Sofia-SIP: Multiple Vulnerabilities

Background Sofia-SIP is an RFC3261 compliant SIP User-Agent library. Description Multiple vulnerabilities have been discovered in Sofia-SIP. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE identifiers for details. Workaround There is no know...