Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP
概要
Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, rest = record + 2 will access the memory behind \0 and cause an out-of-bounds write. An attacker can send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such as remote code execution. Version 1.13.8 contains a patch for this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Alpine Linux ALPINE-CVE-2022-31003 sofia-sip 修正版: 1.13.8-r0
- Debian DEBIAN-CVE-2022-31003 sofia-sip 修正版: 1.12.11+20110422.1-2.1+deb11u1
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory debian.org
- patch github.com
- web lists.debian.org