CVE-2026-52986

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: don't use simplestrtoul Replace unsafe port parsing in epaddrlen, ctsipparseheaderuri, and ctsipparserequest with a new sipparseport helper that validates each digit against the buffer limit, eliminatin...

CVE-2026-52986

In the Linux kernel, the following vulnerability has been resolved: netfilter: nfconntracksip: don't use simplestrtoul Replace unsafe port parsing in epaddrlen, ctsipparseheaderuri, and ctsipparserequest with a new sipparseport helper that validates each digit against the buffer limit, eliminatin...

USN-8122-1 pjproject vulnerabilities

Youngsung Kim discovered that PJSIP did not properly parse numeric header fields in SIP messages. A remote attacker could use this issue to cause PJSIP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. CVE-2017-16872 Peter...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::SipResponseFirstLine::parseFirstLine

Detailed Report: https://oss-fuzz.com/testcase?key=5939270128041984 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x79434f6e0ec9 Crash State:...

Irontec Sngrep security vulnerabilities

Irontec Sngrep is a tool from Irontec for displaying SIP call message streams from endpoints. A security vulnerability exists in Irontec Sngrep versions v1.4.1 through v1.8.1, which stems from copying Content-Length and Warning headers into the sipvalidatepacket and sipparseextraheaders functions...

pcapplusplus:FuzzTarget: Crash in pcpp::cross_platform_memmem

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=4982503654686720 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzermsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

pcapplusplus:FuzzTarget: Crash in pcpp::cross_platform_memmem

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5983761192583168 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerubsanpcapplusplus Platform Id: linux Crash Type: UNKNOWN READ Crash Address:...

pjsip:fuzz-sip: Use-of-uninitialized-value in find_handler

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=5215786350542848 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-sip Job Type: libfuzzermsanpjsip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State:...

pcapplusplus:FuzzTarget: Heap-buffer-overflow in pcpp::cross_platform_memmem

Project: https://github.com/seladb/PcapPlusPlus.git Detailed Report: https://oss-fuzz.com/testcase?key=5421416466481152 Project: pcapplusplus Fuzzing Engine: libFuzzer Fuzz Target: FuzzTarget Job Type: libfuzzerasanpcapplusplus Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Addres...

Asterisk security vulnerabilities

Few DoS conditions on SIP parsing...

Cisco Unified Communications Manager DoS

Crash on SIP parsing...

Cisco Unified Presence / Cisco Unified Communications Manager DoS

Crash on SIP messages parsing...

Cisco PIX and Cisco ASA multiple security vulnerabilities

Multiple DoS conditions on SIP parsing and VPN authentication, memory leaks, information leak...

Asterisk multiple security vulnerabilities

Multiple buffer overflows on T.38 SDP SIP channels parsing. DoS in administration interface. Multiple security vulnerabilities in parsing SIP replies...