7366 matches found
ALPINE-CVE-2023-38703
PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not...
CVE-2023-38703 PJSIP has use-after-free vulnerability in SRTP media transport
PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not...
CVE-2023-38703
PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not...
CVE-2023-38703
CVE-2023-38703 affects the PJSIP library when SRTP is enabled and the underlying transport is not UDP. The issue is a use-after-free in the higher-level SRTP path that is not synchronized with the lower transport, potentially causing memory corruption or application termination. The description n...
CVE-2023-38703 PJSIP has use-after-free vulnerability in SRTP media transport
PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level transport is not...
PT-2023-26568 · Pjsip +2 · Pjsip +2
Name of the Vulnerable Software and Affected Versions: PJSIP affected versions not specified Description: The issue affects applications that have SRTP capability PJMEDIA HAS SRTP is set and use underlying media transport other than UDP. A higher level transport is not synchronized with its lower...
CVE-2022-47562
Vulnerability in the RCPbind service running on UDP port 111, allowing a remote attacker to create a denial of service DoS condition...
CVE-2022-47562 Allocation of Resources Without Limits or Throttling in Ormazabal products
Vulnerability in the RCPbind service running on UDP port 111, allowing a remote attacker to create a denial of service DoS condition...
CVE-2022-47562
CVE-2022-47562 describes a DoS vulnerability in the RCPbind service, exploitable remotely via UDP port 111. The connected documents corroborate a vulnerability leading to service disruption but do not provide specifics on affected products/versions beyond the generic RCPbind/RCPbind service conte...
PT-2023-15405 · Rcpbind · Rcpbind
Name of the Vulnerable Software and Affected Versions: No specific software name is mentioned, but the affected service is RCPbind, and the affected versions are not specified. Description: The issue concerns a vulnerability in the RCPbind service running on UDP port 111, allowing a remote attack...
USN-6382-1: Memcached vulnerability
It was discovered that Memcached incorrectly handled certain multi-packet uploads in UDP. An attacker could possibly use this issue to cause a denial of service...
Siemens SIMATIC TDC CP51M1 Improper Input Validation (CVE-2019-10937)
A vulnerability has been identified in SIMATIC TDC CP51M1 All versions V1.1.7. An attacker with network access to the device could cause a Denial-of-Service condition by sending a specially crafted UDP packet. The vulnerability affects the UDP communication of the device. The security vulnerabili...
[NetScaler-Syslog] HA Secondary node Cannot Transmit Syslog Messages in TCP
NetScaler supports report syslog messages to an external syslog server. But in HA deployment, you may observe the issue that: HA Secondary node doesn't send syslog messages while Primary is good if "Transport Type" is TCP. Configuring it to UDP has no issue...
USN-6164-2 c-ares vulnerabilities
USN-6164-1 fixed several vulnerabilities in c-ares. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Hannes Moesl discovered that c-ares incorrectly handled certain ipv6 addresses. An attacker could use this issue to cause c-ares ...
USN-6164-2: c-ares vulnerabilities
USN-6164-1 fixed several vulnerabilities in c-ares. This update provides the corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: Hannes Moesl discovered that c-ares incorrectly handled certain ipv6 addresses. An attacker could use this issue to cause c-ares ...
Debian: Security Advisory (DLA-3557-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 3557-1] memcached security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-3557-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 07, 2023 https://wiki.debian.org/LTS -...
Mirai Botnet Variant 'Pandora' Hijacks Android TVs for Cyberattacks
A Mirai botnet variant called Pandora has been observed infiltrating inexpensive Android-based TV sets and TV boxes and using them as part of a botnet to perform distributed denial-of-service DDoS attacks. Doctor Web said the compromises are likely to occur either during malicious firmware update...
Oracle Linux 6 : avahi (ELSA-2011-0779)
The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2011-0779 advisory. - Fix for CVE-2011-1002 - Fix for CVE-2011-1002 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note tha...
Oracle Linux 5 : ELSA-2016-0045-1: / kernel (ELSA-2016-00451)
The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2016-00451 advisory. - The 1 udprecvmsg and 2 udpv6recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote...