68 matches found
EUVD-2022-48339
Malicious code in bioql PyPI...
EUVD-2022-50277
Malicious code in bioql PyPI...
EUVD-2022-50276
Malicious code in bioql PyPI...
EUVD-2022-48340
Malicious code in bioql PyPI...
EUVD-2022-50278
Malicious code in bioql PyPI...
EUVD-2022-48754
Malicious code in bioql PyPI...
The vulnerability of the software server for processing SIP traffic in drachtio-server, related to the inability to properly validate requests, allows attackers to trigger a service failure.
The vulnerability of the drachtio-server software for processing SIP traffic is related to an unaddressed flaw. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2022-47517
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that causes a urlcanonize2 heap-based buffer over-read because of an off-by-one error...
CVE-2022-47515
An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a long message in a TCP request that leads to std::lengtherror...
CVE-2022-45474
drachtio-server 0.8.18 has a request-handler.cpp eventcb use-after-free for any request...
CVE-2022-45909
drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request...
SUSE CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
Debian dla-3334 : libsofia-sip-ua-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3334 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3334-1 [email protected] https://www.debian.org/lts/security/...
CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
DEBIAN-CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
CVE-2022-47515
An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a long message in a TCP request that leads to std::lengtherror...
CVE-2022-47517
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that causes a urlcanonize2 heap-based buffer over-read because of an off-by-one error...
Cross site request forgery (csrf)
An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a long message in a TCP request that leads to std::lengtherror...
CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion...
Heap overflow
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service daemon crash via a crafted UDP message that causes a urlcanonize2 heap-based buffer over-read because of an off-by-one error...