Olivierlaflamme

An integer underflow in the `switch xml decode()` function occurs when an XML document declares an entity with an empty replacement value, leading to an undersized heap allocation. A subsequent copying operation overruns the allocated buffer. An unauthenticated attacker can trigger this issue by sending a crafted SIP PUBLISH request to a SIP profile that has presence management enabled and permits DTD (Document Type Definition) processing. Successful exploitation can corrupt heap memory and terminate the process, resulting in the interruption of all active calls.

The issue is related to OS Command Injection, which can be exploited via the `/usr/lib/oui-httpd/rpc/logread` endpoint. This allows for potential execution of system commands, posing a security risk.

The issue is related to password disclosure. It affects devices with specific software, firmware, and hardware versions.

The issue is related to Incorrect Access Control. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.