diff options
| author | Steve Wills <swills@FreeBSD.org> | 2017-10-11 18:30:51 +0000 |
|---|---|---|
| committer | Steve Wills <swills@FreeBSD.org> | 2017-10-11 18:30:51 +0000 |
| commit | 4dbb7932ca30ee61ea79ecd921d6d61ab2b9673a (patch) | |
| tree | a00ffead7ef0e7a98f0857f6085217d32770190f | |
| parent | devel/ncurses: update to 20171007 snapshot (diff) | |
Document libosip2 issue
Notes
Notes:
svn path=/head/; revision=451770
| -rw-r--r-- | security/vuxml/vuln.xml | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 1206bc754ea1..f6308b403f4d 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -58,6 +58,33 @@ Notes: * Do not forget port variants (linux-f10-libxml2, libxml2, etc.) --> <vuxml xmlns="http://www.vuxml.org/apps/vuxml-1"> + <vuln vid="15a62f22-098a-443b-94e2-2d26c375b993"> + <topic>osip -- Improper Restriction of Operations within the Bounds of a Memory Buffer</topic> + <affects> + <package> + <name>libosip2</name> + <range><le>5.0.0</le></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>osip developers reports:</p> + <blockquote cite="http://www.securityfocus.com/bid/97644"> + <p>In libosip2 in GNU oSIP 4.1.0 and 5.0.0, a malformed SIP message can lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS.</p> + </blockquote> + </body> + </description> + <references> + <url>http://www.securityfocus.com/bid/97644</url> + <url>https://savannah.gnu.org/support/index.php?109265</url> + <cvename>CVE-2017-7853</cvename> + </references> + <dates> + <discovery>2017-04-13</discovery> + <entry>2017-10-11</entry> + </dates> + </vuln> + <vuln vid="b84dbd94-e894-4c91-b8cd-d328537b1b2b"> <topic>ncurses -- multiple issues</topic> <affects> |