Wireshark 1.10.x < 1.10.3 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.10.3. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.10.3 advisory. - epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before...

Fedora 43 : janus (2026-2a6ce5b288)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-2a6ce5b288 advisory. Update to upstream v1.4.2 security release. - Fix AudioBridge recordings bypassing protected folders PR 3676 - Fix missing protocol allowlist when using...

Wireshark 1.8.x < 1.8.11 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.11. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.11 advisory. - epan/dissectors/packet-tcp.c in the TCP dissector in Wireshark 1.8.x before 1.8.11 and 1.10.x before...

Cisco ASA Improper Resource Shutdown or Release (CVE-2020-3555)

A vulnerability in the SIP inspection process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition. The...

Fedora 45 : janus (2026-d58d30885a)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-d58d30885a advisory. Update to upstream v1.4.2 security release. - Fix AudioBridge recordings bypassing protected folders PR 3676 - Fix missing protocol allowlist when using...

Cisco ASA Integer Underflow (CVE-2019-12678)

A vulnerability in the Session Initiation Protocol SIP inspection module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The...

Cisco ASA Improper Input Validation (CVE-2018-15454)

A vulnerability in the Session Initiation Protocol SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause an affected device to reload or trigger high CPU, resulting in a deni...

D-Link Router Sip Parameter RCE (CVE-2018-10823)

Exploits CVE-2018-10823 in D-Link DWR routers: command injection via the Sip parameter on chkisg.htm. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link router chkisg.htm command injection CVE-2018-10823.""" import re import urllib.parse from kittysploit import from lib.protocols.http.httpclient...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nfconntracksip – Fixed the issue where Content-Length values exceeding UINTMAX were truncated before calculating the SIP message boundary. In siphelptcp, the Content-Length header is parsed using simplestrtoul. This...

Cisco ASA Insufficient Session Expiration (CVE-2021-1501)

A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service DoS condition.The...

[SECURITY] Fedora 45 Update: opensips-4.0.2-4.fc45

OpenSIPS or Open SIP Server is a very fast and flexible SIP RFC3261 proxy server. Written entirely in C, opensips can handle thousands calls per second even on low-budget hardware. A C Shell like scripting language provides full control over the server's behaviour. It's modular architecture allow...

CVE-2026-100070

A flaw was found in the Linux kernel. This vulnerability can result in information disclosure when processing Session Initiation Protocol SIP traffic through the netfilter Network Address Translation NAT helper. When address rewriting shortens a packet, the helper fails to adjust its internal...

[SECURITY] Fedora 45 Update: sipp-3.7.7-5.fc45

SIPp is a free Open Source test tool / traffic generator for the SIP protocol. It includes a few basic SipStone user agent scenarios UAC and UAS and establishes and releases multiple calls with the INVITE and BYE methods. It can also reads custom XML scenario files describing from very simple to...

PT-2026-98740

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the netfilter nf conntrack sip component. The sip skip whitespace function returns the dptr pointer unchanged when the buffer is exhausted instead of...

PT-2026-98827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfilter module where the nf nat sip component fails to correctly adjust the offset when Network Address Translation NAT changes the packet length. Specifically,...

PT-2026-97819

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description An out-of-bounds write issue exists in the Altera Trusted Firmware on HPS due to systemic missing address validation in SiP SMC handlers. This flaw allows for the...

PT-2026-97829

Name of the Vulnerable Software and Affected Versions Altera Trusted Firmware on HPS versions prior to socfpga v2.14.0 Description An out-of-bounds read issue exists where unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3. This can lead to...

CVE-2026-63449

A flaw was found in Suricata, a network Intrusion Detection System IDS and Intrusion Prevention System IPS. The Session Initiation Protocol SIP parser incorrectly handles large SIP message bodies. When a SIP message body exceeds 65,536 bytes, the parser truncates its length, preventing the full...

EUVD-2026-84818

SIPGO is a library for writing SIP services in the GO language. Prior to 1.4.3, WSConnection.Read in sip/transportws.go creates a wsutil.Reader without setting MaxFrameSize, allowing NextFrame to accept a client-controlled header.Length before ParseMaxMessageLength is applied. An unauthenticated ...

CVE-2026-58268

The sipgo library (versions prior to 1.4.1 ) is vulnerable to an unauthenticated Denial of Service (DoS) via an oversized Content-Length header. The vulnerability exists in the ParserStream.parseSingle function within sip/parser_stream.go, where the library allocates a SIP body buffer based on th...