htb-machine-ringdown

htb-machine-ringdown 针对 Ringdown 的详细设计与利用分析——这是一台原创的 Debian/Asterisk 漏洞靶机，涉及 CVE-2024-42365（AMI）、PJSIP 预哈希破解以及 Fail2ban POSIX ACL 权限提升。...

Linux Distros Unpatched Vulnerability : CVE-2026-57165

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet...

Linux Distros Unpatched Vulnerability : CVE-2026-57164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 8d5956a, a heap buffer overflow exists in the PJLIB-UTIL HTTP...

Linux Distros Unpatched Vulnerability : CVE-2026-57166

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet...

Linux Distros Unpatched Vulnerability : CVE-2026-57159

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the S...

Linux Distros Unpatched Vulnerability : CVE-2026-57163

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backen...

Linux Distros Unpatched Vulnerability : CVE-2026-57160

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsipgenericarrayhdrprint...

Linux Distros Unpatched Vulnerability : CVE-2026-57162

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit a1b707c, a stack buffer overflow exists in the SRTP/SDES media...

Linux Distros Unpatched Vulnerability : CVE-2026-57161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing...

CVE-2026-57165

A flaw was found in PJSIP. A stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall. A remote attacker, with access to the unauthenticated telnet CLI, can trigger this issue because the line-redraw sequence can accumulate more dat...

CVE-2026-57166

A flaw was found in PJSIP. A stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. A remote attacker, with access to the unauthenticated telnet CLI, can send an overly long command line to trigger this issue. This can cause an...

CVE-2026-57160

A flaw was found in PJSIP. A buffer overflow can occur during the serialization of Session Initiation Protocol SIP message headers. A remote attacker can exploit this issue by influencing serialized SIP messages in applications that parse and re-serialize incoming SIP requests, such as proxies or...

CVE-2026-57164

A flaw was found in PJSIP. A heap buffer overflow vulnerability exists in the PJLIB-UTIL HTTP client when processing HTTP response bodies. A malicious or man-in-the-middle HTTP server can exploit this by sending a specially crafted response, leading to an incorrect size calculation and causing da...

CVE-2026-57161

A flaw was found in PJSIP. A stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response. A malicious registrar that returns an excessive number of Service-Route headers can exploit this to write past the end of the array on the stack. This can result in...

DEBIAN-CVE-2026-57166

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

CVE-2026-57166

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 4472a31, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when rendering feedback for an entered command line. Several command-line handling paths write an attacker-influenced amoun...

DEBIAN-CVE-2026-57165

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 628b716, a stack buffer overflow exists in the PJLIB-UTIL telnet CLI front-end when redrawing the command line during history recall handleupdown in clitelnet.c. This affects only applications that enab...

DEBIAN-CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...

CVE-2026-57161

PJSIP is a free and open source multimedia communication library written in C. Prior to commit acc03b5, a stack buffer overflow exists in PJSUA when processing Service-Route headers in a registration response updateserviceroute in pjsuaacc.c. This affects applications that register using the...

CVE-2026-57163

PJSIP is a free and open source multimedia communication library written in C. Prior to commit c4a151a, a stack buffer overflow exists in the GnuTLS TLS backend when parsing the Subject Alternative Name extension of a peer certificate tlscertgetinfo in sslsockgtls.c. Only GnuTLS builds are affect...