Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 22:27:45 +0000 CVE-2022-31003 — Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP https://cve.radiocsirt.org/vuln/cve-2022-31003 <p><strong>Affected:</strong> freeswitch sofia-sip</p> <p>Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = record + 2` will access the memory behind `\0` and cause an out-of-bounds write. An attacker can send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such as remote code execution. Version 1.13.8 contains a patch for this issue.</p> <p><strong>Affected:</strong> freeswitch sofia-sip</p> <p>Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = record + 2` will access the memory behind `\0` and cause an out-of-bounds write. An attacker can send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such as remote code execution. Version 1.13.8 contains a patch for this issue.</p> https://cve.radiocsirt.org/vuln/cve-2022-31003 USN-5932-1 — sofia-sip vulnerabilities https://cve.radiocsirt.org/vuln/usn-5932-1 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: sofia-sip, Ubuntu:18.04:LTS: sofia-sip, Ubuntu:20.04:LTS: sofia-sip, Ubuntu:22.04:LTS: sofia-sip</p> <p>It was discovered that Sofia-SIP incorrectly handled specially crafted SDP packets. A remote attacker could use this issue to cause applications using Sofia-SIP to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-31001, CVE-2022-31002, CVE-2022-31003)</p> <p>It was discovered that Sofia-SIP incorrectly handled specially crafted UDP packets. A remote attacker could use this issue to cause applications using Sofia-SIP to crash, leading to a denial of service. (CVE-2022-47516)</p> <p>Qiuhao Li discovered that Sofia-SIP incorrectly handled specially crafted STUN packets. A remote attacker could use this issue to cause applications using Sofia-SIP to crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2023-22741)</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: sofia-sip, Ubuntu:18.04:LTS: sofia-sip, Ubuntu:20.04:LTS: sofia-sip, Ubuntu:22.04:LTS: sofia-sip</p> <p>It was discovered that Sofia-SIP incorrectly handled specially crafted SDP packets. A remote attacker could use this issue to cause applications using Sofia-SIP to crash, leading to a denial of service, or possibly execute arbitrary code. This issue only affected Ubuntu 16.04 ESM, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS and Ubuntu 22.04 LTS. (CVE-2022-31001, CVE-2022-31002, CVE-2022-31003)</p> <p>It was discovered that Sofia-SIP incorrectly handled specially crafted UDP packets. A remote attacker could use this issue to cause applications using Sofia-SIP to crash, leading to a denial of service. (CVE-2022-47516)</p> <p>Qiuhao Li discovered that Sofia-SIP incorrectly handled specially crafted STUN packets. A remote attacker could use this issue to cause applications using Sofia-SIP to crash, leading to a denial of service, or possibly execute arbitrary code. (CVE-2023-22741)</p> https://cve.radiocsirt.org/vuln/usn-5932-1