← Back

Resiprocate

resiprocate

Vendor: Resiprocate • 5 CVEs

CVEs (5)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Debian
Resiprocate
2Debian Linux
Resiprocate
Nov 21, 2024
Jul 16, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when...Show more
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.Show less
1Resiprocate
1Resiprocate
May 13, 2026
Aug 18, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Buffer overflow in the ares_parse_a_reply function in the embedded ares library in ReSIProcate before 1.12.0 allows remote attackers to cause a denial of service (out-of-bounds-read) via a crafted DNS response.
2Debian
Resiprocate
2Debian Linux
Resiprocate
May 13, 2026
Jul 22, 2017
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service (memory consumption) by triggering many media connections.
1Resiprocate
1Resiprocate
Apr 23, 2026
Jul 18, 2008
N/A· v4
N/A· v3
5.0 MEDIUM· v2
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daemon crash) via a SIP (1) INVITE or (2) OPTIONS message with a long domain name in a request URI, whic...Show more
rutil/dns/DnsStub.cxx in ReSIProcate 1.3.2, as used by repro, allows remote attackers to cause a denial of service (daemon crash) via a SIP (1) INVITE or (2) OPTIONS message with a long domain name in a request URI, which triggers an assert error.Show less
1Resiprocate
1Resiprocate
Apr 23, 2026
Jul 17, 2008
N/A· v4
N/A· v3
7.8 HIGH· v2
Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service (stack consumption) via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."