Vulnerabilities > CVE-2014-10375 - Numeric Errors vulnerability in GNU Exosip 3.5.0/4.0.0/4.1.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
HIGH Availability impact
NONE Summary
handle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content-length header.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |