heap-over-flow and integer-overflow in sofia-sip

CVE-2023-32307

What is CVE-2023-32307?

Sofia-SIP, an open-source SIP User-Agent library, has been identified to have vulnerabilities linked to heap overflow and integer overflow in the handling of STUN packets. The lack of proper attribute length checks in the functions stun_parse_attr_error_code and stun_parse_attr_uint32 allows attackers to exploit these weaknesses, potentially resulting in crashes, excessive memory usage, or additional severe repercussions. Although a prior patch addressed specific issues related to mismatched attribute types, further vulnerabilities remain unaddressed. Users are strongly encouraged to upgrade to version 1.13.15, which rectifies these vulnerabilities.

References