CVE-2016-10324

Critical

Published: 13/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.

Risk Assessment

Buffer overflow may allow an attacker to execute arbitrary code, posing a serious threat to the integrity and availability of the system.

Recommendation

It is recommended to upgrade to the latest version of GNU oSIP to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.