EUVD-2022-52708

Malicious code in bioql PyPI...

EUVD-2023-26859

Malicious code in bioql PyPI...

PT-2023-6421 · Sofia-Sip +3 · Sofia-Sip +3

Name of the Vulnerable Software and Affected Versions: Sofia-SIP versions 1.12.4 and later, up to the version before the fix was introduced Description: The issue is related to the lack of message length and attributes length checks when handling STUN packets, leading to a controllable...

CVE-2022-31002 Out-of-bounds Read in Sofia-SIP

Sofia-SIP is an open-source Session Initiation Protocol SIP User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be caused by a URL ending with %. Version 1.13.8 contains a patch for this issue...