Sofia-sip (Freeswitch) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-05-26. Vendor: Freeswitch.

CVEs of Sofia-sip

• CVE-2023-32307 - CVSS 7.5 (high), 2023-05-26: Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to…
• CVE-2023-22741 - CVSS 9.8 (critical), 2023-01-19: Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. In affected versions Sofia-SIP **lacks both message length…
• CVE-2022-31003 - CVSS 9.8 (critical), 2022-05-31: Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, when parsing each line of a sdp message, `rest =…
• CVE-2022-31001 - CVSS 7.5 (high), 2022-05-31: Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to…
• CVE-2022-31002 - CVSS 7.5 (high), 2022-05-31: Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library. Prior to version 1.13.8, an attacker can send a message with evil sdp to…