Arbitrary Code Execution

resiprocate is vulnerable to arbitrary code execution. A buffer overflow in the function ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx allows an attacker to crash the application and potentially execute arbitrary code on the host OS...

reSIProcate Denial of Service Vulnerability

reSIProcate is a C++ implementation of protocols such as SIP Session Initiation Protocol, ICE P2P Communication Protocol and TURN Profile Transfer Protocol. A security vulnerability exists in the 'ConnectionBase::prepareNewBytes' function in the resip/stack/ConnectionBase.cxx file in reSIProcate...

Buffer overflow

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...

CVE-2018-12584

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...

CVE-2018-12584

CVE-2018-12584 affects reSIProcate’s SIP stack, specifically ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx. When TLS is enabled, it allows remote attackers to trigger a heap overflow/denial of service and potentially execute arbitrary code. Multiple connected advisories note ...

CVE-2018-12584

Removed by vendor...