Vulnerabilities

TI-2022-23591 CVE-2022-47517 · GHSA-c8mq-83h4-gm57

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19.

HIGH 72

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01562 Published 2022-12-18 No fix listed CWE-193

TI-2022-23590 CVE-2022-47516 · GHSA-w32h-m3r8-mq4c

HIGH 72

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01758 Published 2022-12-18 No fix listed CWE-617

TI-2022-23589 CVE-2022-47515 · GHSA-44mv-gf6j-pvgx

HIGH 72

An issue was discovered in drachtio-server before 0.8.20.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0123 Published 2022-12-18 No fix listed CWE-170

TI-2022-22693 CVE-2022-45909 · GHSA-w3rv-r6q7-vcpw

MEDIUM 41

drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01076 Published 2022-11-26 No fix listed CWE-125

TI-2022-22432 CVE-2022-45474 · GHSA-mc63-4cpc-gjqj

HIGH 82

drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01022 Published 2022-11-18 No fix listed CWE-416

TI-2022-22431 CVE-2022-45473 · GHSA-xffq-h277-r59h

LOW 25

In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has mode 0666.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00293 Published 2022-11-18 No fix listed