SUSE-SU-2017:1187-1: libosip2&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2017:1187-1 is a vulnerability in libosip2&distro=SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 05-05-2017
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for libosip2 This update for libosip2 fixes several issues. These security issues were fixed: - CVE-2017-7853: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS (bsc#1034570). - CVE-2016-10326: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS (bsc#1034571). - CVE-2016-10325: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS (bsc#1034572). - CVE-2016-10324: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c (bsc#1034574).

No weakness data has been published for this record.