shield
Security update for libosip2
SUSE-SLE-SDK-12-SP1-2017-704
This update for libosip2 fixes several issues. These security issues were fixed: - CVE-2017-7853: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the msg_osip_body_parse() function defined in osipparser2/osip_message_parse.c, resulting in a remote DoS (bsc#1034570). - CVE-2016-10326: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the osip_body_to_str() function defined in osipparser2/osip_body.c, resulting in a remote DoS (bsc#1034571). - CVE-2016-10325: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the _osip_message_to_str() function defined in osipparser2/osip_message_to_str.c, resulting in a remote DoS (bsc#1034572). - CVE-2016-10324: In libosip2 a malformed SIP message could have lead to a heap buffer overflow in the osip_clrncpy() function defined in osipparser2/osip_port.c (bsc#1034574).
-
Release DateMay 5 2017
-
ReferencesBugzilla: 1034574, 1034571, 1034570, 1034572
CVEs: CVE-2016-10326, CVE-2016-10324, CVE-2016-10325, CVE-2017-7853 -
Typesecurity
-
Severitymoderate
cloud_download Downloads
SUSE Linux Enterprise Software Development Kit 12.1 ppc64le
-
Packageslibosip2
Implementation of SIP--RFC 3261libosip2-devel3.5.0-20.1 lock rpm lock src
Implementation of SIP--RFC 32613.5.0-20.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12.1 s390x
-
Packageslibosip2
Implementation of SIP--RFC 3261libosip2-devel3.5.0-20.1 lock rpm lock src
Implementation of SIP--RFC 32613.5.0-20.1 lock rpm
SUSE Linux Enterprise Software Development Kit 12.1 x86_64
-
Packageslibosip2
Implementation of SIP--RFC 3261libosip2-devel3.5.0-20.1 lock rpm lock src
Implementation of SIP--RFC 32613.5.0-20.1 lock rpm