CVE-2016-10326

Name of the Vulnerable Software and Affected Versions GNU oSIP version 4.1.0

Description A malformed SIP message can cause a heap buffer overflow in the osip body to str() function, leading to a remote denial of service. The issue is related to the osip body to str() function defined in osipparser2/osip body.c.

Recommendations For GNU oSIP version 4.1.0, consider disabling the osip body to str() function as a temporary workaround until a patch is available. Restrict access to the osipparser2/osip body.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.