PT-2023-23716 · Sofia-Sip+3 · Sofia-Sip+3

Andywolk · Published 2023-05-26 · Updated 2025-08-12 · CVE-2023-32307

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sofia-SIP versions prior to 1.13.15

Description Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Several potential heap-over-flow and integer-overflow vulnerabilities were found in stun parse attr error code and stun parse attr uint32 due to the lack of attributes length check when Sofia-SIP handles STUN packets. The previous patch fixed the vulnerability when attr type did not match the enum value, but there are also vulnerabilities in the handling of other valid cases. The OOB read and integer-overflow made by an attacker may lead to crash, high consumption of memory or even other more serious consequences.

Recommendations To resolve the issue, upgrade to version 1.13.15 or later. As a temporary workaround, consider restricting the handling of STUN packets to minimize the risk of exploitation. Avoid using the stun parse attr error code and stun parse attr uint32 functions until the issue is resolved.

Exploit

Fix

Integer Overflow

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-190

CWE-787

CWE-122

Related Identifiers

BDU:2025-09871

CVE-2023-32307

DLA-3441-1

DSA-5431-1

GHSA-RM4C-CCVF-FF9C

MGASA-2023-0209

USN-6448-1

Affected Products

Linuxmint

Red Os

Sofia-Sip

Ubuntu

References · 27

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/32xxx/CVE-2023-32307.json · Exploit
• 🔥 https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-rm4c-ccvf-ff9c · Exploit
• https://osv.dev/vulnerability/DLA-3441-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-32307 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6448-1 · Vendor Advisory
• https://osv.dev/vulnerability/DSA-5431-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-32307 · Vendor Advisory
• https://debian.org/security/2023/dsa-5431 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-32307 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32307 · Security Note
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/OY66DOQ3B7GULJTI66X5HNX5FU3P65CX · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-09871 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32307 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-32307 · Security Note
• https://debian.org/lts/security/2023/dla-3441 · Vendor Advisory