CVE-2023-27598 OpenSIPS has vulnerability in the parse_via() function

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed Via header to OpenSIPS triggers a segmentation fault when the function calctagsuffix is called. A specially crafted Via header, which is deemed correct by the parser, will...

OSV-2022-1044 Heap-buffer-overflow in parse_via

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52326 Crash type: Heap-buffer-overflow READ 1 Crash state: parsevia gethdrfield parseheaders...