https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T02:22:25.690699+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-09869 bdu:2025-09869 2026-10-04T02:22:25.695293+00:00 bdu:2025-09869 https://cve.radiocsirt.org/vuln/euvd-2026-231680 EUVD-2026-231680 2026-10-04T02:22:25.695328+00:00 EUVD-2026-231680 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47516 fkie_cve-2022-47516 2026-10-04T02:22:25.695342+00:00

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion.

 https://cve.radiocsirt.org/vuln/ghsa-w32h-m3r8-mq4c GHSA-w32h-m3r8-mq4c 2026-10-04T02:22:25.695377+00:00

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion.

 https://cve.radiocsirt.org/vuln/gsd-2022-47516 gsd-2022-47516 2026-10-04T02:22:25.695393+00:00 gsd-2022-47516 https://cve.radiocsirt.org/vuln/oesa-2026-2682 OESA-2026-2682 — sofia-sip security update 2026-10-04T02:22:25.695404+00:00

Affected: openEuler:24.03-LTS-SP1: sofia-sip

Sofia SIP is a RFC-3261-compliant library for SIP user agents and other network elements. The Session Initiation Protocol (SIP) is an application-layer control (signaling) protocol for creating, modifying, and terminating sessions with one or more participants. These sessions include Internet telephone calls, multimedia distribution, and multimedia conferences. Security Fix(es):

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion.(CVE-2022-47516)

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54), several other potential heap-over-flow and integer-overflow in stun_parse_attr_error_code and stun_parse_attr_uint32 were found because the lack of attributes length check when Sofia-SIP handles STUN packets. The previous patch of [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54) fixed the vulnerability when attr_type did not match the enum value, but there are also vulnerabilities in the handling of other valid cases. The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. These is…

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-47516 UBUNTU-CVE-2022-47516 2026-10-04T02:22:25.695440+00:00

Affected: Ubuntu:Pro:16.04:LTS: sofia-sip, Ubuntu:18.04:LTS: sofia-sip, Ubuntu:20.04:LTS: sofia-sip, Ubuntu:22.04:LTS: sofia-sip

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion.