CVE-2016-10326
HighSummary
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function, resulting in a remote DoS.
Risk Assessment
The organization may be exposed to DoS attacks that can lead to service unavailability related to SIP.
Recommendation
It is recommended to update to the latest version of GNU oSIP to mitigate this vulnerability and to monitor SIP traffic for potential attacks.
Other vulnerabilities in libosip2 w GNU oSIP 4.1.0
See all- CVE-2016-10325High
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the _osip_message_to_str() function.
- CVE-2016-10324Critical
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.
Original NVD description (English source)
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS.