CVE-2022-47517

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that causes a urlcanonize2 heap-based buffer over-read because of an off-by-one error...

CVE-2022-47516

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...

CVE-2022-47516

CVE-2022-47516 affects the Sofia-SIP library (libsofia-sip fork) used by drachtio-server prior to 0.8.20. The vulnerability allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that triggers a self-assertion failure in libsofia-sip-ua/tport/tport.c. Relate...

CVE-2022-47517

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that causes a urlcanonize2 heap-based buffer over-read because of an off-by-one error...

CVE-2022-47517

Removed by vendor...

K10347453: BIG-IP SIP profile vulnerability CVE-2022-41832

Security Advisory Description When a Session Initiation Protocol SIP profile is configured on a virtual server, undisclosed messages can cause an increase in memory resource utilization.CVE-2022-41832 Impact System performance can degrade until the Traffic Management Microkernel TMM process is...

Kamailio SIP Server Out of Bounds Read (CVE-2018-14767)

An out-of-bounds read vulnerability exists in Kamailio . Successful exploitation of this vulnerability could allow a remote attacker to obtain sensitive information...

drachtio-server 缓冲区错误漏洞

drachtio-server is a drachtio open source SIP server built on the sofia SIP stack. A buffer error vulnerability exists in drachtio-server version 0.8.18, which stems from the fact that an attacker can submit an overly long Request-URI via an INVITE request resulting in an out-of-bounds read of a...

drachtio-server information disclosure vulnerability

drachtio-server is a drachtio open source SIP server built on the sofia SIP stack. drachtio drachtio-server version 0.8.18 has an information disclosure vulnerability that stems from the fact that local users can retrieve sensitive data and attackers can use the vulnerability to obtain sensitive...

drachtio-server memory mis-reference vulnerability

drachtio-server is a SIP server built on the sofia SIP stack by drachtio open source. drachtio drachtio-server version 0.8.18 is vulnerable to a memory misquoting vulnerability that stems from the request-handler.cpp component receiving requests when the event The cb instruction responsible for...

Debian dla-3194 : asterisk - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3194 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3194-1 [email protected]...

Debian DSA-5285-1 : asterisk - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5285 advisory. - PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN,...

CVE-2022-20950

A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a lack of error-checking when SIP bidirectional flows are being...

Race condition

A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a lack of error-checking when SIP bidirectional flows are being...

python-pyqt5-sip bug fix and enhancement update

An update is available for python-pyqt5-sip. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

sip bug fix and enhancement update

An update is available for sip. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.1...

CVE-2022-20950

Cisco Firepower Threat Defense (FTD) is affected by CVE-2022-20950 due to a lack of error-checking when SIP bidirectional flows are inspected by Snort 3. The vulnerability allows an unauthenticated, remote attacker to trigger a restart of the Snort 3 detection engine, causing a DoS condition. A c...

CVE-2022-20950

A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a lack of error-checking when SIP bidirectional flows are being...

Cisco Firepower Threat Defense Software SIP and Snort 3 Detection Engine Denial of Service Vulnerability

A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause the Snort 3 detection engine to restart. This vulnerability is due to a lack of error-checking when SIP bidirectional flows are being...

PT-2022-6081 · Cisco · Snort 3 +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the interaction of SIP and Snort 3 for Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to...