CVE-2022-47516 - Remote attackers can cause a denial of service with a crafted UDP message - Sofia SIP

[hfoster]

Heads up. Sofia SIP can possibly bring down your PBXs with an easily craftable OPTIONS message.

Remote attackers can cause a denial of service with a crafted UDP message

Remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion. Update to sofia-sip >= 1.13.14...

github.com