pjsip:fuzz-sip-transaction: Use-of-uninitialized-value in pjsip_tpmgr_receive_packet

Project: https://github.com/pjsip/pjproject.git Detailed Report: https://oss-fuzz.com/testcase?key=6520488649359360 Project: pjsip Fuzzing Engine: libFuzzer Fuzz Target: fuzz-sip-transaction Job Type: libfuzzermsanpjsip Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Cras...

EUVD-2014-3979

Malware in sbrugna...

media-server security vulnerability

media-server is a library from Chen's personal developer. A security vulnerability exists in media-server v1.0.0, which was discovered via the sipuacstoptimer function in /uac/sip-uac-transaction.c to contain a memory reuse after release vulnerability...

Cross site request forgery (csrf)

The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service deadlock by terminating a subscription request before it is complete, which triggers a SIP transaction timeout...

CVE-2014-4048

The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service deadlock by terminating a subscription request before it is complete, which triggers a SIP transaction timeout...

CVE-2014-4048

The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service deadlock by terminating a subscription request before it is complete, which triggers a SIP transaction timeout...

CVE-2014-4048

CVE-2014-4048 affects the Asterisk Open Source PJSIP Channel Driver up to version 12.3.0. An attacker (remote, potentially after bypassing authentication per AST-2014-008) can terminate a subscription before it completes, triggering a SIP transaction timeout and causing a deadlock in the thread s...

CVE-2014-4048

The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service deadlock by terminating a subscription request before it is complete, which triggers a SIP transaction timeout...

CVE-2014-4048

The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service deadlock by terminating a subscription request before it is complete, which triggers a SIP transaction timeout...

CVE-2014-4048: Undefined Security Weakness

The PJSIP Channel Driver in Asterisk Open Source before 12.3.1 allows remote attackers to cause a denial of service deadlock by terminating a subscription request before it is complete, which triggers a SIP transaction timeout...

PT-2014-5696

Name of the Vulnerable Software and Affected Versions Asterisk Open Source versions prior to 12.3.1 Description The issue allows remote attackers to cause a denial of service deadlock by terminating a subscription request before it is complete, which triggers a SIP transaction timeout...