跳转到帖子

Alpine Linux: CVE-2020-27507: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

recommended_posts

发布于
  • Members

Alpine Linux: CVE-2020-27507: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
03/15/2023
Created
03/22/2024
Added
03/21/2024
Modified
03/22/2024

Description

The Kamailio SIP before 5.5.0 server mishandles INVITE requests with duplicated fields and overlength tag, leading to a buffer overflow that crashes the server or possibly have unspecified other impact.

Solution(s)

  • alpine-linux-upgrade-kamailio

References

  • https://attackerkb.com/topics/cve-2020-27507
  • CVE - 2020-27507
  • https://security.alpinelinux.org/vuln/CVE-2020-27507
  • 查看数 715
  • 已创建
  • 最后回复