drachtio-server memory mis-reference vulnerability

drachtio-server is a SIP server built on the sofia SIP stack by drachtio open source. drachtio drachtio-server version 0.8.18 is vulnerable to a memory misquoting vulnerability that stems from the request-handler.cpp component receiving requests when the event The cb instruction responsible for...

CVE-2022-45474

drachtio-server 0.8.18 has a request-handler.cpp eventcb use-after-free for any request...

CVE-2022-45474

drachtio-server 0.8.18 has a request-handler.cpp eventcb use-after-free for any request...

Cross site request forgery (csrf)

drachtio-server 0.8.18 has a request-handler.cpp eventcb use-after-free for any request...

CVE-2022-45474

CVE-2022-45474 affects drachtio-server 0.8.18. The vulnerability is a use-after-free in the file request-handler.cpp: event_cb that can trigger on any request, leading to memory corruption and potential arbitrary code execution. CVSSv3.1 metrics indicate a CRITICAL score (9.8) with NETWORK access...