rpm package
suse/libosip2&distro=SUSE Linux Enterprise Desktop 12 SP1
pkg:rpm/suse/libosip2&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP1
Vulnerabilities (4)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2017-7853 | Hig | 7.5 | < 3.5.0-20.1 | 3.5.0-20.1 | Apr 13, 2017 | In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS. | |
| CVE-2016-10326 | Hig | 7.5 | < 3.5.0-20.1 | 3.5.0-20.1 | Apr 13, 2017 | In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS. | |
| CVE-2016-10325 | Hig | 7.5 | < 3.5.0-20.1 | 3.5.0-20.1 | Apr 13, 2017 | In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS. | |
| CVE-2016-10324 | Cri | 9.8 | < 3.5.0-20.1 | 3.5.0-20.1 | Apr 13, 2017 | In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c. |
- affected < 3.5.0-20.1fixed 3.5.0-20.1
In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.
- affected < 3.5.0-20.1fixed 3.5.0-20.1
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS.
- affected < 3.5.0-20.1fixed 3.5.0-20.1
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS.
- affected < 3.5.0-20.1fixed 3.5.0-20.1
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.