Arbitrary Code Execution

resiprocate is vulnerable to arbitrary code execution. A buffer overflow in the function ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx allows an attacker to crash the application and potentially execute arbitrary code on the host OS...

CVE-2018-12584

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...

Buffer overflow

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...