PT-2022-20449 · Sofia-Sip+4 · Sofia-Sip+4

Cossack9989 · Published 2022-05-31 · Updated 2025-08-12 · CVE-2022-31002

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sofia-SIP versions prior to 1.13.8

Description Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. An attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be caused by a URL ending with %.

Recommendations For versions prior to 1.13.8, update to version 1.13.8 to resolve the issue. As a temporary workaround, consider restricting the handling of URLs ending with % to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-09872

CVE-2022-31002

DLA-3091-1

DSA-5410-1

GHSA-G3X6-P824-X6HM

MGASA-2022-0343

USN-5932-1

Affected Products

Freeswitch

Linuxmint

Red Os

Sofia-Sip

Ubuntu

References · 35

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31002.json · Exploit
• 🔥 https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-g3x6-p824-x6hm · Exploit
• https://github.com/freeswitch/sofia-sip/commit/51841eb53679434a386fb2dcbca925dcc48d58ba · Patch
• https://osv.dev/vulnerability/CVE-2022-31002 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-31002 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3091-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-31003 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5932-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-31002 · Security Note
• https://advisories.mageia.org/MGASA-2022-0343.html · Security Note
• https://osv.dev/vulnerability/MGASA-2022-0343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31002 · Security Note
• https://osv.dev/vulnerability/USN-5932-1 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2022-31002 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5410-1 · Vendor Advisory