CVE-2016-10326
HIGHGNU oSIP 4.1.0 - Denial of Service via Heap Buffer Overflow in osip_body_to_str
Title source: llmDescription
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS.
References (3)
Core 3
Core References
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2017/dsa-3879
Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
https://savannah.gnu.org/support/index.php?109132
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/92921
Scores
CVSS v3
7.5
EPSS
0.0027
EPSS Percentile
50.8%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-119
Status
published
Products (1)
gnu/osip
4.1.0
Published
Apr 13, 2017
Tracked Since
Feb 18, 2026