CVE-2014-10375

HIGH

eXosip < 5.0.0 - Denial of Service via Negative Content-Length Header

Title source: llm

handle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content-length header.

Core 1

Core References

Mailing List, Patch, Vendor Advisory x_refsource_misc

CVSS v3 7.5

EPSS 0.0035

EPSS Percentile 57.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE

CWE-189

Status published

Products (1)

gnu/exosip < 5.0.0

Published Aug 14, 2019

Tracked Since Feb 18, 2026