Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hcc6-7m2q-wj56

Опубликовано: 02 авг. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.

EPSS

Процентиль: 96%
0.25164
Средний

9.8 Critical

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.

CVSS3: 9.8
fstec
больше 3 лет назад

Уязвимость модуля "SIP ALG" (SIP Application Layer Gateway) средств разработки Realtek SDK для операционной системы eCos, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 96%
0.25164
Средний

9.8 Critical

CVSS3

Дефекты

CWE-20