CVE-2016-10324

EUVD-2016-1508
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
gnuosip
4.1.0
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
libosip2
bookworm
5.3.0-2.1
fixed
bullseye
4.1.0-2.1
fixed
sid
5.3.1-1.1
fixed
trixie
5.3.1-1.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
libosip2
artful
not-affected
bionic
not-affected
cosmic
not-affected
disco
not-affected
precise
ignored
trusty
dne
xenial
Fixed 4.1.0-2+deb8u1build0.16.04.1
released
yakkety
Fixed 4.1.0-2+deb8u1build0.16.10.1
released
zesty
Fixed 4.1.0-2+deb8u1build0.17.04.1
released
Common Weakness Enumeration
References
http://www.debian.org/security/2017/dsa-3879
http://www.securityfocus.com/bid/97641
https://savannah.gnu.org/support/index.php?109133
http://www.debian.org/security/2017/dsa-3879
http://www.securityfocus.com/bid/97641
https://savannah.gnu.org/support/index.php?109133