PT-2017-7864 · Gnu+2 · Gnu Osip+2
Bhargava Shastry
+1
·
Publicado
2017-04-13
·
Atualizado
2019-03-06
·
CVE-2016-10326
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
GNU oSIP version 4.1.0
Description
A malformed SIP message can cause a heap buffer overflow in the
osip body to str() function, leading to a remote denial of service. The issue is related to the osip body to str() function defined in osipparser2/osip body.c.Recommendations
For GNU oSIP version 4.1.0, consider disabling the
osip body to str() function as a temporary workaround until a patch is available. Restrict access to the osipparser2/osip body.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.DoS
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Gnu Osip
Suse