The vulnerability of the Packet Forwarding Engine (PFE) module in JunOS operating systems for MX and SRX routers allows a hacker to cause a service failure.

The vulnerability of the Packet Forwarding Engine PFE module in JunOS operating systems for MX and SRX series routers is related to errors in syntax validation during the processing of SIP packets. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the application-level SIP ALG operating system Juniper Networks Junos routers of the MX and SRX series allows attackers to compromise the integrity of protected information.

The vulnerability of SIP application-level ALG operating systems running on Juniper Networks Junos routers of the MX and SRX series lies in insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of protected...

Juniper Networks Junos OS Code Issue Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A code issue vulnerability exists in Juniper Networks Junos OS that stems from an improperly checked exception or exceptio...

PT-2023-6307 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Junos OS versions prior to 20.4R3-S5 Junos OS versions prior to 21.1R3-S4 Junos OS versions prior to 21.2R3-S4 Junos OS versions prior to 21.3R3-S3 Junos OS versions prior to 21.4R3-S2 Junos OS versions prior to 22.1R2-S2, 22.1R3 Junos OS...

Atos Unify OpenScape Command Injection Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from administrative access via web services...

PT-2023-20483 · Stormshield · Stormshield Network Security

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security SNS versions 4.3.15 through 4.3.15 Stormshield Network Security SNS versions 4.6.x through 4.6.2 Description: The issue allows a crash when analyzing a crafted SIP packet. Recommendations: For Stormshield Network...

The vulnerability of the SIP ALG firewall on Juniper Networks Junos operating systems on devices with MS-MPC or MS-MIC interfaces allows a attacker to cause a service failure.

The vulnerability of the SIP ALG server on Juniper Networks’ Junos operating system on devices with MS-MPC or MS-MIC interfaces is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Amazon Web Services EC2 SSM enumeration

Provided AWS credentials, this module will call the authenticated API of Amazon Web Services to list all SSM-enabled EC2 instances accessible to the account. Once enumerated as SSM-enabled, the instances can be controlled using out-of-band WebSocket sessions provided by the AWS API nominally,...

The vulnerability of the SIP ALG server of Juniper Networks Junos OS allows a attacker to trigger a service failure.

The vulnerability of the SIP ALG server of Juniper Networks Junos OS is related to incorrect handling of requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

SAMSUNG Exynos 缓冲区错误漏洞

SAMSUNG Exynos is a SoC, Arm architecture based processor developed and manufactured by Samsung Mobile, a South Korean company SAMSUNG. SAMSUNG Exynos suffers from a buffer error vulnerability that stems from insufficient parameter validation during decoding of the SIP Via header, resulting in...

SAMSUNG Exynos 缓冲区错误漏洞

SAMSUNG Exynos is a SoC, Arm architecture based processor developed and manufactured by Samsung Mobile, a South Korean company SAMSUNG. SAMSUNG Exynos suffers from a buffer error vulnerability that stems from insufficient parameter validation when decoding SIP URIs, which can lead to memory...

PT-2023-22135 · Samsung · Exynos Modem 5300 +5

Name of the Vulnerable Software and Affected Versions: Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5123 Exynos Mobile Processor, Automotive Processor and Modem for Exynos Modem 5300 Exynos Mobile Processor, Automotive Processor and Modem for Exynos 980 Exynos Mobile...

SAMSUNG Exynos 缓冲区错误漏洞

SAMSUNG Exynos is a SoC, Arm architecture based processor developed and manufactured by Samsung Mobile, a South Korean company SAMSUNG. SAMSUNG Exynos suffers from a buffer error vulnerability that stems from insufficient parameter validation when decoding SIP multipart messages, which can lead t...

SAMSUNG Exynos 缓冲区错误漏洞

SAMSUNG Exynos is a SoC, Arm architecture based processor developed and manufactured by Samsung Mobile, a South Korean company. SAMSUNG Exynos suffers from a buffer error vulnerability that stems from insufficient parameter validation during decoding of the SIP Retry-After header, resulting in...

SAMSUNG Exynos 缓冲区错误漏洞

SAMSUNG Exynos is a SoC, Arm architecture based processor developed and manufactured by Samsung Mobile, a South Korean company. SAMSUNG Exynos suffers from a buffer error vulnerability that originates from insufficient parameter validation when decoding the SIP status line, which can lead to memo...

CVE-2023-28099

OpenSIPS contains a vulnerability in ds_is_in_list() when given an invalid IP string (NULL). Prior to versions 3.1.9 and 3.2.6, this can cause a crash by printing from a random stack address. The issue affects users of ds_is_in_list() where the first parameter is not the $si value. Remediation is...

Memory corruption

OpenSIPS, a Session Initiation Protocol SIP server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5. The memory leak was detected in the function parsemirequest while performing coverage-guided fuzzing. This issue can be reproduced by sending...

CVE-2023-28096

OpenSIPS, a Session Initiation Protocol SIP server implementation, has a memory leak starting in the 2.3 branch and priot to versions 3.1.8 and 3.2.5. The memory leak was detected in the function parsemirequest while performing coverage-guided fuzzing. This issue can be reproduced by sending...

Design/Logic Flaw

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, OpenSIPS crashes when a malformed SDP body is received and is processed by the deletesdpline function in the sipmsgops module. This issue can be reproduced by calling the function with an SDP...

CVE-2023-28098 OpenSIPS has vulnerability in the Digest Authentication Parser

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function parseparamname . This issue was discovered while performing coverag...