CVE-2017-7853
HIGHGNU oSIP 4.1.0 and 5.0.0 - Remote Denial of Service via Malformed SIP Message
Title source: llmDescription
In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.
References (3)
Core 3
Core References
Third Party Advisory vendor-advisory
x_refsource_debian
http://www.debian.org/security/2017/dsa-3879
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/97644
Issue Tracking, Patch, Vendor Advisory x_refsource_confirm
https://savannah.gnu.org/support/index.php?109265
Scores
CVSS v3
7.5
EPSS
0.0026
EPSS Percentile
49.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-119
Status
published
Products (1)
gnu/osip
5.0.0
Published
Apr 13, 2017
Tracked Since
Feb 18, 2026