Arbitrary Code Execution

resiprocate is vulnerable to arbitrary code execution. A buffer overflow in the function ConnectionBase::preparseNewBytes in resip/stack/ConnectionBase.cxx allows an attacker to crash the application and potentially execute arbitrary code on the host OS...

Buffer overflow

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...

CVE-2018-12584

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...

CVE-2018-12584

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...

PT-2018-11270

Name of the Vulnerable Software and Affected Versions reSIProcate versions prior to 1.10.3 Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code when TLS communication is enabled, due to a buffer overflow in the...

CVE-2018-12584: Buffer Copy without Checking Size of Input

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service buffer overflow or possibly execute arbitrary code when TLS communication is enabled...