CERT24GHSA-jwjp-4649-v8jp — SIPSorcery vulnerable to denial of service via out-of-bounds read in SCTP SACK parsingLoading data…
CERT24Threat Observatory
Period

GHSA-jwjp-4649-v8jp — SIPSorcery vulnerable to denial of service via out-of-bounds read in SCTP SACK parsing

SIPSorcery contains an out-of-bounds read vulnerability in SCTP SACK chunk parsing. Attacker-controlled counts can cause reads beyond the receive buffer, terminating the SCTP receive thread and permanently disabling the SCTP association and all data channels.

← Back to intelligence

GHSA-jwjp-4649-v8jp — SIPSorcery vulnerable to denial of service via out-of-bounds read in SCTP SACK parsing

SIPSorcery contains an out-of-bounds read vulnerability in SCTP SACK chunk parsing. Attacker-controlled counts can cause reads beyond the receive buffer, terminating the SCTP receive thread and permanently disabling the SCTP association and all data channels.