Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:39901
HistoryMar 22, 2023 - 4:52 a.m.

Remote Code Execution (RCE)

2023-03-2204:52:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
remote code execution
sofia-sip
sdp message parsing
freeswitch vulnerability
out-of-bounds write

0.027 Low

EPSS

Percentile

90.6%

JSON

sofia-sip is vulnerable to Remote Code Execution (RCE). When parsing each line of a sdp message, rest = record + 2 will access the memory behind \0 and cause an out-of-bounds write. An attacker is able to send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such as remote code execution.

Related

debiancve 1
cve 1
alpinelinux 1
ubuntucve 1
cvelist 1
nvd 1
osv 4
prion 1
gentoo 1
nessus 4
debian 2
mageia 1
openvas 4
ubuntu 1
debiancve
debiancve
CVE-2022-31003
2022-05-31 20:15:07
cve
cve
CVE-2022-31003
2022-05-31 20:15:07
alpinelinux
alpinelinux
CVE-2022-31003
2022-05-31 20:15:07
ubuntucve
ubuntucve
CVE-2022-31003
2022-05-31 00:00:00
cvelist
cvelist
CVE-2022-31003 Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP
2022-05-31 00:00:00
nvd
nvd
CVE-2022-31003
2022-05-31 20:15:07
osv
osv
CVE-2022-31003
2022-05-31 20:15:07
sofia-sip - security update
2022-09-02 00:00:00
sofia-sip - security update
2023-05-24 00:00:00
prion
prion
Out-of-bounds
2022-05-31 20:15:00
gentoo
gentoo
Sofia-SIP: Multiple Vulnerabilities
2022-10-31 00:00:00
nessus
nessus
Debian DLA-3091-1 : sofia-sip - LTS security update
2022-09-02 00:00:00
GLSA-202210-18 : Sofia-SIP: Multiple Vulnerabilities
2022-10-31 00:00:00
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : Sofia-SIP vulnerabilities (USN-5932-1)
2023-03-07 00:00:00
debian
debian
[SECURITY] [DLA 3091-1] sofia-sip security update
2022-09-02 05:45:22
[SECURITY] [DSA 5410-1] sofia-sip
2023-05-24 10:39:40
mageia
mageia
Updated sofia-sip packages fix security vulnerability
2022-09-21 21:15:27
openvas
openvas
Debian: Security Advisory (DLA-3091-1)
2022-09-03 00:00:00
Mageia: Security Advisory (MGASA-2022-0343)
2022-09-22 00:00:00
Debian: Security Advisory (DSA-5410-1)
2023-05-25 00:00:00
ubuntu
ubuntu
Sofia-SIP vulnerabilities
2023-03-07 00:00:00

0.027 Low

EPSS

Percentile

90.6%

JSON
Related for VERACODE:39901
debiancve1cve1alpinelinux1ubuntucve1cvelist1nvd1osv4prion1gentoo1nessus4debian2mageia1openvas4ubuntu1