D-Link DIR-816 A2 Buffer Error Vulnerability

The D-Link DIR-816 A2 is a wireless router from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2 v1.10CNB05, which originates from a parameter sipaddress found to contain a stack overflow via ipportFilter...

PT-2023-5374

Name of the Vulnerable Software and Affected Versions D-Link DIR-816 A2 version 1.10CNB05 Description The issue is related to a stack overflow in the ipportFilter function via the sip address parameter. This can allow a remote attacker to impact the confidentiality, integrity, and availability of...

Atos Unify OpenScape Input Validation Error Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. An input validation error vulnerability exists in Atos Unify OpenScape. No information about this vulnerability is available at this time, please stay tuned to CNNVD or the vendor announcement...

CVE-2023-26095

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

CVE-2023-26095

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

CVE-2023-26095

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

Code injection

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

CVE-2023-26095

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

CVE-2023-26095

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

CVE-2023-26095: Improper Input Validation

ASQ in Stormshield Network Security SNS 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet...

CVE-2023-26095

CVE-2023-26095 affects Stormshield Network Security (SNS): ASQ in SNS versions 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 crashes when processing a crafted SIP packet. Root cause not detailed in the provided documents. Remediation: upgrade to SNS 4.3.16 or 4.6.3 (as applicable). Exploit informat...

pcapplusplus:FuzzTarget: Crash in pcpp::cross_platform_memmem

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4982503654686720 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

pcapplusplus:FuzzTarget: Crash in pcpp::SipRequestFirstLine::SipRequestFirstLine

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4818679978917888 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

Juniper Junos OS Vulnerability (JSA69513)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69513 advisory. - An Access of Uninitialized Pointer vulnerability in the SIP ALG of Juniper Networks Junos OS allows an unauthenticated network-based attacker to cause a Denial of Service...

Docker Hub images found to expose secrets and private keys

Numerous Docker images shared on Docker Hub are exposing sensitive data, according to a study conducted by researchers at the German university RWTH Aachen. Needless to say, this poses a significant security risk. In traditional software development, programmers code an application in one computi...

Jami security vulnerabilities

Jami is an open source, SIP-compatible software telephony and instant messaging software from Jami, Inc. A security vulnerability exists in Jami version 20222284 that originates from a vulnerability that allows an attacker to send a custom HTML anchor tag that passes a string value to the Windows...

3CX Phone System Detection Consolidation

Consolidation of 3CX Phone System detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc"; if description...

Mageia: Security Advisory (MGASA-2023-0209)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated sofia-sip packages fix security vulnerability

The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. CVE-2023-32307...

F5 Networks BIG-IP : BIG-IP SIP profile vulnerability (K08182564)

The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5.3 / 15.1.8.1 / 16.1.3.3 / 17.0.0. It is, therefore, affected by a vulnerability as referenced in the K08182564 advisory. - On BIG-IP versions 16.1.x before 16.1.3.3, 15.1.x before 15.1.8.1, 14.1.x before 14.1.5.3, a...