Debian/sofia-sip: critical 9.8
Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP **lacks both message length and attributes length checks** when it han
Action: Upgrade sofia-sip to 1.12.11+20110422.1+1e14eea~dfsg-4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.11+20110422.1+1e14eea~dfsg-4 | - |
Fixed versions
| 1.12.11+20110422.1+1e14eea~dfsg-4 |
Sources
- osv: DEBIAN-CVE-2023-22741#Debian:14/sofia-sip
- https://security-tracker.debian.org/tracker/CVE-2023-22741
published · modified · JSON