PT-2017-7863
CVE-2016-10325
·
Published
2017-04-13
·
Updated
2019-03-06
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
GNU oSIP version 4.1.0
Description
A malformed SIP message can cause a heap buffer overflow in the
checkPassword() function is not mentioned, however the osip message to str() function is, resulting in a remote denial of service.Recommendations
For GNU oSIP version 4.1.0, consider disabling the
osip message to str() function until a patch is available to prevent exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾