PT-2021-23890 · Belledonne · Belle-Sip+1

Published 2021-11-12 · Updated 2021-11-16 · CVE-2021-43611

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Belledonne Belle-sip versions prior to 5.0.20

Description: The issue allows applications such as Linphone to crash when a specific character, ``, is present in the display name of a From header.

Recommendations: For versions prior to 5.0.20, update to version 5.0.20 or later to resolve the issue. As a temporary workaround, consider restricting the use of special characters in the display name of the From header to minimize the risk of application crashes.

Fix

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

CVE-2021-43611

Affected Products

Belle-Sip

Linphone

References · 6

• https://github.com/BelledonneCommunications/belle-sip/compare/5.0.18...5.0.20 · Patch
• https://github.com/BelledonneCommunications/belle-sip/commit/d3f0651531e45e91c2e60f3a16a8b612802e5d2d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-43611 · Security Note
• https://osv.dev/vulnerability/CVE-2021-43611 · Vendor Advisory
• https://t.me/cvenotify/23359 · Telegram Post
• https://t.me/cibsecurity/32355 · Telegram Post