SUSE-SU-2017:1188-1: libosip2&distro=SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2017:1188-1 is a vulnerability in libosip2&distro=SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 05-05-2017
   PublishedVulnerability first disclosed.
2. 02-05-2025
   Last modifiedVulnerability information updated.

Description

Security update for libosip2 This update for libosip2 fixes several issues. These security issues were fixed: - CVE-2017-7853: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS (bsc#1034570) - CVE-2016-10326: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS (bsc#1034571) - CVE-2016-10325: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS (bsc#1034572) - CVE-2016-10324: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c (bsc#1034574)

No weakness data has been published for this record.