Two vulnerabilities were fixed in the reSIProcate SIP stack. CVE-2017-11521 . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-2865-1
CVE-2018-12584 A flaw in function ConnectionBase::preparseNewBytes of resip/stack/ConnectionBase.cxx has been detected, that . Package : resiprocate Version : 1:1.9.7-5+deb8u1 CVE ID : CVE-2017-11521 CVE-2018-12584 CVE-2018-12584 A flaw in function ConnectionBase::preparseNewBytes of resip/stack/ConnectionBase.cxx has been detected, that allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled. CVE-2017-11521 A flaw in function SdpContents::Session::Medium::parse of resip/stack/SdpContents.cxx has been detected, that allows remote attackers to cause a denial of service (memory consumption) by triggering many media connections. For Debian 8 "Jessie", these problems have been fixed in version 1:1.9.7-5+deb8u1. We recommend that you upgrade your resiprocate packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Essential reciprocal security patch fixes denial of service vulnerabilities for Debian 8 Jessie. Immediate upgrade advised!. debian LTS,resiprocate security update,denial of service,buffer overflow. . Severity: Critical. LinuxSecurity.com Team
CVE-2017-11521 The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote . Hash: SHA512 Package : resiprocate Version : 1.8.5-4+deb7u1 CVE ID : CVE-2017-11521 CVE-2017-11521 The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service (memory consumption) by triggering many media connections. For Debian 7 "Wheezy", these problems have been fixed in version 1.8.5-4+deb7u1. We recommend that you upgrade your resiprocate packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS . Update the resiprocate package to version 1.8.5-4+deb7u1 to address CVE-2017-11521 denial-of-service vulnerabilities in Debian LTS environments.. resiprocate security update, debian lts, denial of service. . Severity: Critical. LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.