CVE-2016-10325

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipmessagetostr function defined in osipparser2/osipmessagetostr.c, resulting in a remote DoS...

DEBIAN-CVE-2016-10326

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...

UBUNTU-CVE-2016-10326

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...

Heap overflow

In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS...

CVE-2016-10325

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipmessagetostr function defined in osipparser2/osipmessagetostr.c, resulting in a remote DoS...

UBUNTU-CVE-2016-10324

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipclrncpy function defined in osipparser2/osipport.c...

CVE-2016-10326

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...

CVE-2016-10325

CVE-2016-10325 affects libosip2 (GNU oSIP) 4.1.0, where a malformed SIP message can cause a heap buffer overflow in the _osip_message_to_str() function, leading to a remote denial of service. Connected advisories corroborate the issue across multiple distros and report fixes in updated libosip2 p...

CVE-2016-10324

CVE-2016-10324 concerns libosip2 (GNU oSIP) 4.1.0 where a malformed SIP message can trigger a heap buffer overflow in osip_clrncpy() (osipparser2/osip_port.c). Related entries cite additional heap-based DoS issues in the same libosip2 release family (CVE-2016-10325, CVE-2016-10326) and CVE-2017-7...

CVE-2016-10326

The CVE-2016-10326 entry affects libosip2 (GNU oSIP 4.1.0). A malformed SIP message can trigger a heap buffer overflow in osip_body_to_str() (osipparser2/osip_body.c), causing a remote DoS. Connected advisories confirm related issues across distributions (e.g., Debian DLA-898-1, SUSE/openSUSE upd...

CVE-2017-7853

CVE-2017-7853 affects libosip2 (GNU oSIP) in versions 4.1.0 and 5.0.0, where a malformed SIP message can trigger a heap buffer overflow in msg_osip_body_parse(), enabling a remote DoS. Multiple connected advisories confirm the vulnerability and note fixes across distributions (e.g., Debian 4.1.0-...

CVE-2016-10326

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...

CVE-2016-10324

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipclrncpy function defined in osipparser2/osipport.c...

CVE-2016-10325

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipmessagetostr function defined in osipparser2/osipmessagetostr.c, resulting in a remote DoS...

osip -- Improper Restriction of Operations within the Bounds of a Memory Buffer

osip developers reports: In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS...

Antisip libosip2 4.1.0 Heap Buffer Overflow / Denial Of Service

Antisip's libosip2 v4.1.0 is vulnerable to heap buffer overflows in the following functions while parsing SIP messages and leads to a DoS if glibc hardening is enabled. 1. osipbodytostr 2. osipmessagetostr All files for reproducing the issues have been filed in the bug tracker 12 and have since...

libosip2 / SIP Witch DoS

NULL pointer dereference...

SIP Witch 0.7.4 w/libosip2-4.0.0 DoS via NULL pointer derefence in libosip2

SIP Witch 0.7.4 w/libosip2-4.0.0 Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 DoS by the NULL pointer derefence in libosip2. True, found in the ancient version of sipwitch default in BT5 but the problem lies in the library used by it and may...

SIP Witch 0.7.4 Denial Of Service

SIP Witch 0.7.4 w/libosip2-4.0.0 Authors: 22733db72ab3ed94b5f8a1ffcde850251fe6f466 c8e74ebd8392fda4788179f9a02bb49337638e7b AKAT-1 DoS by the NULL pointer derefence in libosip2. True, found in the ancient version of sipwitch default in BT5 but the problem lies in the library used by it and may...