27 matches found
CVE-2026-110679
A flaw was found in OpenSIPS. An out-of-bounds read vulnerability in the rtpproxy module allows a remote attacker to cause a Denial of Service DoS or access sensitive memory contents. By sending specially crafted requests handled by the rtpproxy offer and answer functions, an attacker can cause t...
CVE-2026-110679
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...
CVE-2026-110679
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...
CVE-2026-110679
The OpenSIPS software is vulnerable in versions up to 3.6.8 and 4.0.1 due to an out-of-bounds read vulnerability. The flaw exists within the rtpproxy_offer/rtpproxy_answer functions of the rtpproxy component, which can be triggered through remote manipulation. This vulnerability could allow an at...
EUVD-2026-101677
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...
CVE-2026-110679
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...
CVE-2026-110679 OpenSIPS rtpproxy rtpproxy_answer out-of-bounds
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...
CVE-2026-110679 OpenSIPS rtpproxy rtpproxy_answer out-of-bounds
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...
CVE-2026-110679 OpenSIPS rtpproxy rtpproxy_answer out-of-bounds
A vulnerability was determined in OpenSIPS up to 3.6.8/4.0.1. The impacted element is the function rtpproxyoffer/rtpproxyanswer of the component rtpproxy. This manipulation causes out-of-bounds read. The attack may be initiated remotely. Upgrading to version 3.6.9 and 4.0.2 is sufficient to resol...
EUVD-2017-5626
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2017-14114
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP...
PT-2025-22245 · Git +1 · Rtpproxy
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software experiences a segmentation fault Segv on an unknown address during operation. The crash state involves the rtpp refcnt decref, hash table purge,...
rtpproxy:fuzz_command_parser: Segv on unknown address in rtpp_refcnt_decref
Project: https://github.com/sippy/rtpproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4824007600046080 Project: rtpproxy Fuzzing Engine: libFuzzer Fuzz Target: fuzzcommandparser Job Type: libfuzzerasanrtpproxy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...
rtpproxy:fuzz_rtp_session: Segv on unknown address in rtpp_refcnt_decref
Project: https://github.com/sippy/rtpproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4736132766564352 Project: rtpproxy Fuzzing Engine: honggfuzz Fuzz Target: fuzzrtpsession Job Type: honggfuzzasanrtpproxy Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash...
rtpproxy:fuzz_rtp_session: Heap-buffer-overflow in fuzz_rtp_session.c
Project: https://github.com/sippy/rtpproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=6349538254716928 Project: rtpproxy Fuzzing Engine: afl Fuzz Target: fuzzrtpsession Job Type: aflasanrtpproxy Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x525000009b98...
rtpproxy:fuzz_command_parser: Crash in rtpp_shutdown
Project: https://github.com/sippy/rtpproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=4671040876249088 Project: rtpproxy Fuzzing Engine: libFuzzer Fuzz Target: fuzzcommandparser Job Type: libfuzzerasanrtpproxy Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x503ffffffff1...
RTPproxy Denial of Service Vulnerability
RTPproxy is a software proxy. A security vulnerability exists in the NAT feature of RTPproxy 2.2.alpha.20160822 and earlier versions, which stems from the program failing to properly identify the IP address and port number of a legitimate recipient of RTP traffic. An attacker can exploit this...
CVE-2017-14114
RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service communication outage via crafted RTP...
CVE-2017-14114
RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service communication outage via crafted RTP...
Design/Logic Flaw
RTPproxy through 2.2.alpha.20160822 has a NAT feature that results in not properly determining the IP address and port number of the legitimate recipient of RTP traffic, which allows remote attackers to obtain sensitive information or cause a denial of service communication outage via crafted RTP...