Skip to content
OpenAdvisories

Package · Alpine

sofia-sip

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-22741

    heap-over-flow in stun_parse_attribute in sofia-sip

    Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP **lacks both message length and attributes length checks** when it handles STUN packets, leading to controllable heap-over-flow. …

    freeswitch sofia-sip sofia-sip sofia-sip Debian Ubuntu Alpine
  • Critical 9.1
    CVE-2022-31003

    Heap-based Buffer Overflow and Out-of-bounds Write in Sofia-SIP

    Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest = record + 2` will access the memory behind `\0` and cause an out-of-bounds write. An attacker can send a…

    freeswitch sofia-sip sofia-sip sofia-sip Debian Ubuntu Alpine