Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: signalwire Component: Sofia-sip Clear all filters
TI-2023-15601 CVE-2023-32307

heap-over-flow and integer-overflow in sofia-sip

Priority HIGH 72

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01056 Published 2023-05-26 Fixed in 1.13.15 CWE-122
TI-2023-08915 CVE-2023-22741

heap-over-flow in stun_parse_attribute in sofia-sip

Priority HIGH 82

Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02482 Published 2023-01-19 Fixed in 1.13.11 CWE-120
TI-2022-13048 CVE-2022-31002

Out-of-bounds Read in Sofia-SIP

Priority HIGH 72

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01925 Published 2022-05-31 Fixed in 1.13.8 CWE-125
TI-2022-13047 CVE-2022-31001

Out-of-bounds Read in Sofia-SIP

Priority LOW 37

Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0222 Published 2022-05-31 Fixed in 1.13.8 CWE-125