Lucene search
+L

6 matches found

Debian CVE
Debian CVE
•added 2026/10/29 5:09 p.m.•9 views

CVE-2026-45103

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the Content-Length header using unsigned int arithmetic with no overflow check. When an attacker sends a Content-Length value that overflows unsigned...

7.5CVSS6.1AI score0.00585EPSS
SaveExploits0
osv_pysec
osv_pysec
•added 2026/09/10 9:45 a.m.•26 views

PYSEC-2026-3849 HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated

Summary HTTPX2 can automatically add a Content-Length header to a request that already contains a caller-supplied Transfer-Encoding header. The resulting HTTP/1.1 request contains both framing headers, which can create an ambiguous message boundary and enable request smuggling or connection...

5.6CVSS5.8AI score0.00221EPSS
SaveExploits0References8
Mend
Mend
•added 2026/08/04 9:56 p.m.•12 views

CVE-2026-45103

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the Content-Length header using unsigned int arithmetic with no overflow check. When an attacker sends a Content-Length value that overflows unsigned...

8.7CVSS6.1AI score0.00585EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/04 12:00 a.m.•12 views

CVE-2026-45103: Integer Overflow or Wraparound

OpenSIPS is a Session Initiation Protocol SIP server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the Content-Length header using unsigned int arithmetic with no overflow check. When an attacker sends a Content-Length value that overflows unsigned...

7.5CVSS6.1AI score0.00585EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/04 12:00 a.m.•12 views

PT-2026-67880

Name of the Vulnerable Software and Affected Versions OpenSIPS versions prior to 3.6.6 OpenSIPS versions prior to 4.0.0-rc1 Description The TCP message framing layer parses the Content-Length header using unsigned int arithmetic without overflow checks. An unauthenticated, network-based attacker...

7.5CVSS5.8AI score0.00585EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/23 12:00 a.m.•12 views

CVE-2026-26365: Inconsistent Interpretation of HTTP Requests

Akamai Ghost on Akamai CDN edge servers before 2026-02-06 mishandles processing of custom hop-by-hop HTTP headers, where an incoming request containing the header "Connection: Transfer-Encoding" could result in a forward request with invalid message framing, depending on the Akamai processing pat...

4CVSS7.9AI score0.00201EPSS
SaveExploits0References1
Rows per page
Query Builder