Kamailio 4.3.4 - Heap Based Buffer Overflow

Exploit for linux platform in category dos / poc CVE ID: CVE-2016-2385 Affected Products: Kamailio 4.3.4 and possibly previous versions Class: Heap-based Buffer Overflow CWE-122 Remote: Yes Discovered by: Stelios Tsampas Kamailio successor of former OpenSER and SER is an Open Source SIP Server...

[SECURITY] [DSA 3535-1] kamailio security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3535-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 29, 2016 https://www.debian.org/security/faq -...

DSA-3535-1 kamailio - security update

Bulletin has no description...

Debian Security Advisory DSA 3535-1 (kamailio - security update)

Stelios Tsampas discovered a buffer overflow in the Kamailio SIP proxy which might result in the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb3535.nasl 6608 2017-07-07 12:05:05Z cfischer $ Auto-generated from advisory DSA 3535-1 using nvtgen 1.0 Script version: 1.0 Author:...

Debian: Security Advisory (DSA-3535-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The researchers found that the SIP vulnerability, Apple latest protection features are bypass-vulnerability warning-the black bar safety net

Security researchers have found a vulnerability, use it to create a tool to allow a hacker to bypass Apple's latest protection features, system integrity protection, System Integrity Protection, SIP it. ! System integrity protection should be strengthened Apple explained, the system to protect th...

CVE-2016-1350

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service device reload via malformed SIP messages, aka Bug ID CSCuj23293...

CVE-2016-1350

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service device reload via malformed SIP messages, aka Bug ID CSCuj23293...

Code injection

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service device reload via malformed SIP messages, aka Bug ID CSCuj23293...

CVE-2016-1350

CVE-2016-1350 affects Cisco IOS (versions 15.3–15.4), Cisco IOS XE (3.8–3.11), and Cisco Unified Communications Manager. The issue is a memory-leak/DoS in the SIP gateway caused by improper processing of malformed SIP messages, leading to remote attackers potentially triggering a device reload. T...

CVE-2016-1350

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service device reload via malformed SIP messages, aka Bug ID CSCuj23293...

Apple Mac OS X Zero Day Vulnerability SIP Bypass

System Integrity Protection SIP was implemented in OS X El Capitan and imposes limitations on what actions that Mac computers’ root accounts can take against protected paths of the operating system. Yesterday at the SysCan360 conference in Singapore, a researcher from SentinelOne disclosed detail...

Mac OS X Zero-Day Exploit Can Bypass Apple's Latest Protection Feature

A critical zero-day vulnerability has been discovered in all versions of Apple's OS X operating system that allows hackers to exploit the company’s newest protection feature and steal sensitive data from affected devices. With the release of OS X El Capitan, Apple introduced a security protection...

Cisco IOS/IOS XE/Cisco Unified Communications Manager Information Disclosure Vulnerability

Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A vulnerability in the SIP gateway implementation of Cisco IOS, IOS XE, Cisco Unified Communications Manager Software could be exploited by an unauthenticated, remote attacker to cau...

innovaphone IP222 UDP Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2016-016 Product: innovaphone IP222 Manufacturer: innovaphone AG Affected Versions: 11r2 sr9 Tested Versions: 11r2 sr9 Vulnerability Type: Improper Input Validation CWE-20 Risk Level: High Solution Status: Fixed Manufacturer...

Cisco IOS and IOS XE and Cisco Unified Communications Manager Software Session Initiation Protocol Memory Leak Vulnerability

A vulnerability in the Session Initiation Protocol SIP gateway implementation in Cisco IOS, IOS XE, and Cisco Unified Communications Manager Software could allow an unauthenticated, remote attacker to cause a memory leak and eventual reload of an affected device. The vulnerability is due to...

Cisco TelePresence Video Communication Server Denial of Service Vulnerability

Cisco TelePresence Video Communication Server VCS is a telepresence video communication server from Cisco that integrates with Unified Communications and voice communication environments to provide the best possible experience for end users using a variety of communication tools. A security...

CVE-2016-1338

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

Design/Logic Flaw

Cisco TelePresence Video Communication Server VCS X8.5.1 and X8.5.2 allows remote authenticated users to cause a denial of service VoIP outage via a crafted SIP message, aka Bug ID CSCuu43026...

Cisco TelePresence Video Communication Server Denial of Service Vulnerability

A vulnerability in the Session Initiation Protocol SIP message handling process of Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect processing of specific incoming SIP...