5454 matches found
Cisco IP Phones 8851 Session Initiation Protocol Denial of Service (CVE-2017-6630)
A vulnerability in the Session Initiation Protocol SIP implementation of Cisco IP Phone 8851 11.00.1 could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to an abnormal SIP message. An attacker could exploit this vulnerability by...
Cisco IP Phones 8800 Series File Upload Denial of Service (CVE-2019-1766)
A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability exists because the...
Cisco IP Phones 8800 Series Path Traversal (CVE-2019-1765)
A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an authenticated, remote attacker to write arbitrary files to the filesystem. The vulnerability is due to insufficient input validation and file-level...
Cisco 9900 Series IP Phone Crafted Header Unregister (CVE-2014-0658)
Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service unregistration via a crafted SIP header, aka Bug ID CSCul24898. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, In...
Cisco IP Phones 7800 Series and 8800 Series Remote Code Execution (CVE-2019-1716)
A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 7800 Series and Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to cause a denial of service DoS condition or execute arbitrary code. The vulnerability...
Cisco IP Phones 8800 Series Authorization Bypass (CVE-2019-1763)
A vulnerability in the web-based management interface of Session Initiation Protocol SIP Software for Cisco IP Phone 8800 Series could allow an unauthenticated, remote attacker to bypass authorization, access critical services, and cause a denial of service DoS condition. The vulnerability exists...
Cisco Unified SIP Phone 3905 Permissions, Privileges, and Access Controls (CVE-2014-0721)
The Cisco Unified SIP Phone 3905 with firmware before 9.41 allows remote attackers to obtain root access via a session on the test interface on TCP port 7870, aka Bug ID CSCuh75574. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...
[SECURITY] Fedora 38 Update: baresip-3.10.1-1.fc38
A modular SIP user-agent with support for audio and video, and many IETF standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and IPv6. Additional modules provide support for audio codecs like Codec2, G.711, G.722, G.726, GSM, L16, MPA and Opus, audio drivers like ALSA, GStreamer...
[SECURITY] Fedora 39 Update: baresip-3.10.1-1.fc39
A modular SIP user-agent with support for audio and video, and many IETF standards such as SIP, SDP, RTP/RTCP and STUN/TURN/ICE for both, IPv4 and IPv6. Additional modules provide support for audio codecs like Codec2, G.711, G.722, G.726, GSM, L16, MPA and Opus, audio drivers like ALSA, GStreamer...
[SECURITY] Fedora 38 Update: sofia-sip-1.13.12-2.fc38
Sofia SIP is a RFC-3261-compliant library for SIP user agents and other network elements. The Session Initiation Protocol SIP is an application-layer control signaling protocol for creating, modifying, and terminating sessions with one or more participants. These sessions include Internet telepho...
Fedora: Security Advisory for sofia-sip (FEDORA-2024-b9c02df30f)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 38 : sofia-sip (2024-b9c02df30f)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b9c02df30f advisory. Security fix for CVE-2023-32307 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...
de.ikor.sip.foundation:sip-integration-starter (3.2.0), de.ikor.sip.foundation:sip-security (3.2.0) +95 more potentially affected by CVE-2024-22371 via org.apache.camel:camel-core (>=4.0.0, <=4.0.3)
org.apache.camel:camel-core MAVEN version =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.3 and...
Cisco TelePresence Video Communication Server (VCS) Detection Consolidation
Consolidation of Cisco TelePresence Video Communication Server VCS detections. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...
CVE-2024-24262
media-server v1.0.0 was discovered to contain a Use-After-Free UAF vulnerability via the sipuacstoptimer function at /uac/sip-uac-transaction.c...
Design/Logic Flaw
media-server v1.0.0 was discovered to contain a Use-After-Free UAF vulnerability via the sipsubscriberemove function at /uac/sip-uac-subscribe.c...
media-server security vulnerability
media-server is a library from Chen's personal developer. A security vulnerability exists in media-server v1.0.0, which was discovered via the sipuacstoptimer function in /uac/sip-uac-transaction.c to contain a memory reuse after release vulnerability...
CVE-2024-24262: Use After Free
media-server v1.0.0 was discovered to contain a Use-After-Free UAF vulnerability via the sipuacstoptimer function at /uac/sip-uac-transaction.c...
media-server security vulnerability
media-server is a library from Chen's personal developer. A security vulnerability exists in media-server v1.0.0, which was discovered via the sipsubscriberemove function in /uac/sip-uac-subscribe.c to contain a memory reuse after release vulnerability...
