Skip to content
OpenAdvisories
High USN-6448-1 1 CVE

sofia-sip vulnerability

Published Oct 24, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

Xu Biang discovered that Sofia-SIP did not properly manage memory when
handling STUN packets. An attacker could use this issue to cause
Sofia-SIP to crash, resulting in a denial of service, or possibly execute
arbitrary code.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS sofia-sip 1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.2
Ubuntu · 22.04 LTS 22.04:LTS sofia-sip 1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.2
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS sofia-sip 1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS sofia-sip 1.12.11+20110422.1-2.1+deb10u3ubuntu0.18.04.1~esm1

Vulnerabilities 1

  • High 7.5
    CVE-2023-32307

    heap-over-flow and integer-overflow in sofia-sip

    Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54), several other potential heap-over-flow and …

    freeswitch sofia-sip sofia-sip sofia-sip Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-32307