openSUSE: Security Advisory for libosip2 (openSUSE-SU-2017:1127-1)

The remote host is missing an update for the Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Security update for libosip2 (important)

This update for libosip2 fixes the following issues: Changes in libosip2: - CVE-2017-7853: In libosip2 in GNU 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS. boo1034570 -...

Cisco ASA Software IKEv1 XAUTH Parameter Handling Remote DoS (cisco-sa-20170419-asa-xauth)

According to its self-reported version and configuration, the Cisco Adaptive Security Appliance ASA software running on the remote device is affected by a denial of service vulnerability in the Internet Key Exchange Version 1 IKEv1 XAUTH code due to improper validation of the IKEv1 XAUTH paramete...

CVE-2016-7516

The ReadVIFFImage function in coders/viff.c in ImageMagick allows remote attackers to cause a denial of service out-of-bounds read via a crafted VIFF file...

Debian DLA-898-1 : libosip2 security update

CVE-2016-10324 In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipclrncpy function defined in osipparser2/osipport.c. CVE-2016-10325 In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipmessagetostr...

Cisco NX-OS Failed Authentication Handling Remote DoS (cisco-sa-20170315-nss1)

According to its version and configuration, the Cisco NX-OS software running on the remote device is affected by a denial of service vulnerability in the remote login functionality due to improper handling of failed authentication during login. An unauthenticated, remote attacker can exploit this...

Cisco NX-OS Telnet Packet Header Handling Remote DoS (cisco-sa-20170315-nss)

According to its version and configuration, the Cisco NX-OS software running on the remote device is affected by a denial of service vulnerability in the Telnet remote login functionality due to improper validation of Telnet packet headers. An unauthenticated, remote attacker can exploit this, vi...

CVE-2016-10326

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...

CVE-2017-7853

In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS...

CVE-2016-10326

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...

Heap overflow

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...

CVE-2016-10325

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipmessagetostr function defined in osipparser2/osipmessagetostr.c, resulting in a remote DoS...

Heap overflow

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipmessagetostr function defined in osipparser2/osipmessagetostr.c, resulting in a remote DoS...

CVE-2016-10325

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipmessagetostr function defined in osipparser2/osipmessagetostr.c, resulting in a remote DoS...

Heap overflow

In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msgosipbodyparse function defined in osipparser2/osipmessageparse.c, resulting in a remote DoS...

CVE-2016-10326

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...

CVE-2016-10326

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipbodytostr function defined in osipparser2/osipbody.c, resulting in a remote DoS...

CVE-2016-10325

CVE-2016-10325 affects libosip2 (GNU oSIP) 4.1.0, where a malformed SIP message can cause a heap buffer overflow in the _osip_message_to_str() function, leading to a remote denial of service. Connected advisories corroborate the issue across multiple distros and report fixes in updated libosip2 p...

CVE-2017-7853

CVE-2017-7853 affects libosip2 (GNU oSIP) in versions 4.1.0 and 5.0.0, where a malformed SIP message can trigger a heap buffer overflow in msg_osip_body_parse(), enabling a remote DoS. Multiple connected advisories confirm the vulnerability and note fixes across distributions (e.g., Debian 4.1.0-...

CVE-2016-10326

The CVE-2016-10326 entry affects libosip2 (GNU oSIP 4.1.0). A malformed SIP message can trigger a heap buffer overflow in osip_body_to_str() (osipparser2/osip_body.c), causing a remote DoS. Connected advisories confirm related issues across distributions (e.g., Debian DLA-898-1, SUSE/openSUSE upd...