Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 10 | sofia-sip | 1.12.11+20110422.1-2.1+deb10u2 |
Vulnerabilities 1
-
Critical 9.8
heap-over-flow in stun_parse_attribute in sofia-sip
Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP **lacks both message length and attributes length checks** when it handles STUN packets, leading to controllable heap-over-flow. …