SUSE CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CLEANSTART-2023-VH35592 Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

Security vulnerability affects the sofia-sip package. Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library...

CLEANSTART-2023-GU96600 Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

Security vulnerability affects the sofia-sip package. Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library...

CLEANSTART-2023-QK46817 Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

Security vulnerability affects the sofia-sip package. Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library...

CLEANSTART-2023-SA01744 Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification

Security vulnerability affects the sofia-sip package. Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification...

Fedora 45 : sofia-sip (2026-c8a8e02b22)

The remote Fedora 45 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-c8a8e02b22 advisory. Upstream release 1.13.18. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested f...

Fedora 46 : sofia-sip (2026-4157a13c05)

The remote Fedora 46 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-4157a13c05 advisory. Automatic update for sofia-sip-1.13.18-2.fc46. Changelog Tue Oct 27 2026 Tomi Lhteenmki - 1.13.18-2 - Patch for oversized MIME boundary fedora2554363 Tenable...

Linux Distros Unpatched Vulnerability : CVE-2026-110658

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the proces...

CVE-2026-110658

A flaw was found in Sofia-SIP. An unauthenticated remote attacker can cause a Denial of Service DoS by sending a specially crafted Session Initiation Protocol SIP message containing an oversized multipart boundary that exceeds the message body length. During message parsing, this flaw causes the...

UBUNTU-CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

DEBIAN-CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658 Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658 Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP versions through 1.13.18 are vulnerable to a heap out-of-bounds read in the msg_multipart_parse() function. An unauthenticated remote attacker can trigger this vulnerability by sending an INVITE request with a multipart Content-Type where the boundary exceeds the actual body length. Thi...

CVE-2026-110658 Sofia-SIP through 1.13.18 Heap Out-of-Bounds Read via msg_multipart_parse

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

CVE-2026-110658

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...

EUVD-2026-101131

Sofia-SIP through 1.13.18 contains a heap out-of-bounds read vulnerability in msgmultipartparse that allows unauthenticated remote attackers to crash the process by sending oversized MIME boundaries. Attackers can send an INVITE with a multipart Content-Type whose boundary exceeds the body length...