Описание
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.
Ссылки
EPSS
Процентиль: 46%
0.00565
Низкий
7.5 High
CVSS3
Дефекты
CWE-121
Связанные уязвимости
CVSS3: 7.5
github
7 дней назад
SIPp through 3.7.7 contains a stack buffer overflow vulnerability in createAuthHeader() when processing SIP authentication challenges with oversized algorithm parameters. A malicious SIP server can send a crafted 401 or 407 challenge to corrupt the stack and crash the client process.
EPSS
Процентиль: 46%
0.00565
Низкий
7.5 High
CVSS3
Дефекты
CWE-121