CVE-2023-27598 OpenSIPS has vulnerability in the parse_via() function

OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.7 and 3.2.4, sending a malformed Via header to OpenSIPS triggers a segmentation fault when the function calctagsuffix is called. A specially crafted Via header, which is deemed correct by the parser, will...

OSV-2022-1044 Heap-buffer-overflow in parse_via

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52326 Crash type: Heap-buffer-overflow READ 1 Crash state: parsevia gethdrfield parseheaders...

opensips:fuzz_msg_parser: Heap-buffer-overflow in parse_via

Project: https://github.com/OpenSIPS/opensips.git Detailed Report: https://oss-fuzz.com/testcase?key=4560201960783872 Project: opensips Fuzzing Engine: afl Fuzz Target: fuzzmsgparser Job Type: aflasanopensips Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x606000000232...