CVE-2016-10324
CriticalSummary
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.
Risk Assessment
Buffer overflow may allow an attacker to execute arbitrary code, posing a serious threat to the integrity and availability of the system.
Recommendation
It is recommended to upgrade to the latest version of GNU oSIP to mitigate this vulnerability and to monitor the system for unauthorized activities.
Other vulnerabilities in libosip2 w GNU oSIP 4.1.0
See all- CVE-2016-10326High
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function, resulting in a remote DoS.
- CVE-2016-10325High
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function.
Original NVD description (English source)
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.