CVE-2022-31001: Out-of-bounds Read in Sofia-SIP
Vulnerability summary
CVE-2022-31001 is a high (CVSS 7.5) Out-of-bounds Read vulnerability in debian debian_linux. EPSS estimates a 2.22% chance of exploitation in the next 30 days, higher than 82.8% of scored vulnerabilities. 1 public exploit is recorded.
Public exploit (GitHub, Date unknown)
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 4 · Related 1Timeline
- 31-05-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to FreeSWITCH, which may cause crash. This type of crash may be caused by `#define MATCH(s, m) (strncmp(s, m, n = sizeof(m) - 1) == 0)`, which will make `n` bigger and trigger out-of-bound access when `IS_NON_WS(s[n])`. Version 1.13.8 contains a patch for this issue.
CVSS metrics
6 scores · 5 sources · 2 versions- OSV · AlpineEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · UbuntuEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- OSV · DebianEcosystem advisory · calculated7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
2.22%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
Increase +0.08 pp
From 2.14% on 11-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
1 foundSofia Sip
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, no user interaction (CVSS vector). Other conditions: not stated in public data.
Debian2 products
- sofia-sip< 1.12.11+20110422.1+1e14eea~dfsg-3
- debian_linuxEOL10.0 | 11.0
Alpine1 product
- sofia-sip< 1.13.8-r0
Freeswitch1 product
- sofia-sip< 1.13.8
Opensuse1 product
- sofia-sip&distro=openSUSE Tumbleweed< 1.13.17+50-1.1
Signalwire1 product
- sofia-sip< 1.13.8
Ubuntu1 product
- sofia-sip< 1.12.11+20110422.1-2.1+deb10u3ubuntu0.16.04.1~esm1 | < 1.12.11+20110422.1-2.1+deb10u3build0.18.04.1 | < 1.12.11+20110422.1-2.1+deb10u3ubuntu0.20.04.1 | < 1.12.11+20110422.1-2.1+deb10u3ubuntu0.22.04.1
6 vendors · 7 products
References
11 links- github.com/freeswitch/sofia-sip/security/advisories/GHSA-79jq-hh82-cv9gREPORTExploitThird Party Advisory
- github.com/freeswitch/sofia-sip/commit/a99804b336d0e16d26ab7119d56184d2d7110a36REPORTPatchThird Party Advisory
