CVE-2021-34705

A vulnerability in the Voice Telephony Service Provider VTSP service of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to bypass configured destination patterns and dial arbitrary numbers. This vulnerability is due to insufficient validation of dial...

Linphone SIP Stack Bug Could Let Attackers Remotely Crash Client Devices

Cybersecurity researchers on Tuesday disclosed details about a zero-click security vulnerability in the Linphone Session Initiation Protocol SIP stack that could be remotely exploited without any action from a victim to crash the SIP client and cause a denial-of-service DoS condition. Tracked as...

The vulnerability of the `notifyProfileAdded` and `notifyProfileRemoved` functions in the Android operating system allows a hacker to disclose protected information.

The vulnerability of the notifyProfileAdded and notifyProfileRemoved functions in the SipService.java file of the Android operating system is related to authentication errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by these functions...

Live555 Memory Leak Vulnerability (CNVD-2021-93842)

Live555 is a cross-platform C open source project providing solutions for streaming media, which implements support for standard streaming media delivery protocols such as RTP/RTCP, RTSP, SIP, etc. A security vulnerability exists in Live555, which stems from a memory leak in the...

CVE-2021-33056

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...

CVE-2021-33056

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...

CVE-2021-33056

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...

CVE-2021-33056

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...

Design/Logic Flaw

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...

UBUNTU-CVE-2021-33056

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...

CVE-2021-33056

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message...

CVE-2021-33056

CVE-2021-33056 affects Belledonne Belle-sip before 4.5.20 (used in Linphone and other products). The issue is a crash caused by an invalid From header in a SIP message. Red Hat and other sources confirm the same description; no exploitation details are provided. Remediation: upgrade Belle-sip to ...

Live555 Resource Management Error Vulnerability

Live555 is a cross-platform C++ open source project that provides solutions for streaming media , it implements the standard streaming media transport protocols such as RTP/RTCP, RTSP, SIP and other support. A security vulnerability exists in Live555, which stems from the affected product's...

Belledonne Belle-sip 环境问题漏洞

Belledonne Belle-sip is a library that implements the SIP RFC 3261 transport, transaction, and conversation layers from Belledonne, France. A security vulnerability exists in Belledonne Belle-sip versions prior to 4.5.20, which stems from invalid information in SIP message headers, and can be...

Live555 stack overflow vulnerability

Live555 is a cross-platform C open source project that provides solutions for streaming media, which implements support for standard streaming media delivery protocols such as RTP/RTCP, RTSP, SIP, etc. A security vulnerability exists in Live555, which stems from improper handling of a large numbe...

PJSIP competition condition issue vulnerability

PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.A contention problem vulnerability exists in PJSIP, which stems from improper handling of concurrent access when concurrent code need...

CVE-2021-37457

Cross Site Scripting XSS exists in NCH Axon PBX v2.22 and earlier via the SipRule field stored...

CVE-2021-0597

In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

ASB-A-176496502

In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitati...

Avaya Aura Experience Portal Input Validation Error Vulnerability

Avaya Aura Experience Portal is the next generation of Avaya Voice Portal from Avaya, Inc. providing organizations with a single point of orchestration for all automated voice and multimedia applications and services. experience Portal supports SIP, IP, TDM or hybrid environments. It includes...