Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP
Résumé
Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, rest = record + 2 will access the memory behind \0 and cause an out-of-bounds write. An attacker can send a message with evil sdp to FreeSWITCH, causing a crash or more serious consequence, such as remote code execution. Version 1.13.8 contains a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2022-31003 sofia-sip Corrigé dans: 1.13.8-r0
- Debian DEBIAN-CVE-2022-31003 sofia-sip Corrigé dans: 1.12.11+20110422.1-2.1+deb11u1
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory debian.org
- patch github.com
- web lists.debian.org