CVE-2022-31002
Out-of-bounds Read in Sofia-SIP
Summary
Out-of-bounds Read in Sofia-SIP
Original description
The description as published by the source.
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be caused by a URL ending with %. Version 1.13.8 contains a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Alpine Linux ALPINE-CVE-2022-31002 sofia-sip Fixed in: 1.13.8-r0
- Debian DEBIAN-CVE-2022-31002 sofia-sip Fixed in: 1.12.11+20110422.1-2.1+deb11u1
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory debian.org
- patch github.com
- web lists.debian.org