Описание
In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | not-affected | 4.1.0-2.1 |
| bionic | not-affected | 4.1.0-2.1 |
| cosmic | not-affected | 4.1.0-2.1 |
| devel | not-affected | 4.1.0-2.1 |
| disco | not-affected | 4.1.0-2.1 |
| esm-apps-legacy/xenial | released | 4.1.0-2+deb8u1build0.16.04.1 |
| esm-apps/bionic | not-affected | 4.1.0-2.1 |
| esm-apps/xenial | released | 4.1.0-2+deb8u1build0.16.04.1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| precise | ignored | end of life |
Показывать по
Ссылки на источники
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.
In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can l ...
In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.
ALT-PU-2022-3413: package `libosip2` update to version 5.3.1-alt1_1
EPSS
5 Medium
CVSS2
7.5 High
CVSS3