CVE-2022-31002
Out-of-bounds Read in Sofia-SIP
Résumé
Out-of-bounds Read in Sofia-SIP
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause a crash. This type of crash may be caused by a URL ending with %. Version 1.13.8 contains a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-31002 sofia-sip Corrigé dans: 1.13.8-r0
- Debian DEBIAN-CVE-2022-31002 sofia-sip Corrigé dans: 1.12.11+20110422.1-2.1+deb11u1
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory debian.org
- patch github.com
- web lists.debian.org