PatchTheCVEbelle-sip vulnerabilities and fixes
Recent CVEs affecting belle-sip, with upgrade or downgrade steps. 3 tracked.
Also searched as: belle sip.
belle-sip has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-11-12. Highest priority: CVE-2021-33056 (score 49/100).
- CVE-2021-43611 HIGH 7.5 UPGRADE Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a
- CVE-2021-43610 HIGH 7.5 UPGRADE Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header (request
- CVE-2021-33056 HIGH 7.5 UPGRADE Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From head
FAQ
How do I fix belle-sip vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is belle-sip being exploited right now?
None of the tracked belle-sip CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which belle-sip CVE should I patch first?
CVE-2021-33056 currently ranks highest (49/100): Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From head.