CVE-2017-11654

Name of the Vulnerable Software and Affected Versions SIPcrack version 0.2

Description An out-of-bounds read and write flaw was found in the way SIPcrack processed SIP traffic, due to mishandling of 0x00 termination of a payload array. A remote attacker could potentially use this flaw to crash the sipdump process by generating specially crafted SIP traffic.

Recommendations For SIPcrack version 0.2, consider restricting access to the sipdump process until a patch is available to prevent potential crashes caused by specially crafted SIP traffic.