PT-2022-20450 · Sofia-Sip+4 · Sofia-Sip+4

Cossack9989 · Published 2022-05-31 · Updated 2025-08-12 · CVE-2022-31003

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sofia-SIP versions prior to 1.13.8

Description Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. When parsing each line of a sdp message, rest = record + 2 will access the memory behind 0 and cause an out-of-bounds write. An attacker can send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such as remote code execution.

Recommendations For versions prior to 1.13.8, update to version 1.13.8 to resolve the issue. As a temporary workaround, consider restricting the parsing of sdp messages to prevent potential crashes or remote code execution. Avoid using the vulnerable rest = record + 2 line in the sdp message parsing function until the issue is resolved.

Exploit

Fix

RCE

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

BDU:2025-09870

CVE-2022-31003

DLA-3091-1

DSA-5410-1

GHSA-8W5J-6G2J-PXCP

MGASA-2022-0343

USN-5932-1

Affected Products

Freeswitch

Linuxmint

Red Os

Sofia-Sip

Ubuntu

References · 35

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31003.json · Exploit
• 🔥 https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8w5j-6g2j-pxcp · Exploit
• https://github.com/freeswitch/sofia-sip/commit/907f2ac0ee504c93ebfefd676b4632a3575908c9 · Patch
• https://osv.dev/vulnerability/DLA-3091-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-31003 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-5932-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-31003 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-31003 · Security Note
• https://advisories.mageia.org/MGASA-2022-0343.html · Security Note
• https://osv.dev/vulnerability/MGASA-2022-0343 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/693111 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-31003 · Vendor Advisory
• https://osv.dev/vulnerability/USN-5932-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31003 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5410-1 · Vendor Advisory