Vulnerabilities > Signalwire > Sofia SIP > 1.13.8
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-05-26 | CVE-2023-32307 | Heap-based Buffer Overflow vulnerability in multiple products Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54), several other potential heap-over-flow and integer-overflow in stun_parse_attr_error_code and stun_parse_attr_uint32 were found because the lack of attributes length check when Sofia-SIP handles STUN packets. | 7.5 |
2023-01-19 | CVE-2023-22741 | Classic Buffer Overflow vulnerability in Signalwire Sofia-Sip Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. | 9.8 |