https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:02:41.101921+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-218870 EUVD-2026-218870 2026-10-07T21:02:41.177666+00:00 EUVD-2026-218870 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28098 fkie_cve-2023-28098 2026-10-07T21:02:41.177705+00:00

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function `parse_param_name()` . This issue was discovered while performing coverage guided fuzzing of the function parse_msg. The AddressSanitizer identified that the issue occurred in the function `q_memchr()` which is being called by the function `parse_param_name()`. This issue may cause erratic program behaviour or a server crash. It affects configurations containing functions that make use of the affected code, such as the function `www_authorize()` . Versions 3.1.7 and 3.2.4 contain a fix.

 https://cve.radiocsirt.org/vuln/gsd-2023-28098 gsd-2023-28098 2026-10-07T21:02:41.177742+00:00 gsd-2023-28098 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-28098 UBUNTU-CVE-2023-28098 2026-10-07T21:02:41.177755+00:00

Affected: Ubuntu:18.04:LTS: opensips

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. Prior to versions 3.1.7 and 3.2.4, a specially crafted Authorization header causes OpenSIPS to crash or behave in an unexpected way due to a bug in the function `parse_param_name()` . This issue was discovered while performing coverage guided fuzzing of the function parse_msg. The AddressSanitizer identified that the issue occurred in the function `q_memchr()` which is being called by the function `parse_param_name()`. This issue may cause erratic program behaviour or a server crash. It affects configurations containing functions that make use of the affected code, such as the function `www_authorize()` . Versions 3.1.7 and 3.2.4 contain a fix.