Vulnerabilities > CVE-2017-11654 - Out-of-bounds Write vulnerability in Sipcrack Project Sipcrack 0.2

047910
CVSS 5.9 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
high complexity
sipcrack-project
CWE-787

Summary

An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 termination of a payload array was mishandled. A remote attacker could potentially use this flaw to crash the sipdump process by generating specially crafted SIP traffic.

Vulnerable Configurations

Part Description Count
Application
Sipcrack_Project
1

Common Weakness Enumeration (CWE)