PatchTheCVEsipcrack vulnerabilities and fixes
Recent CVEs affecting sipcrack, with upgrade or downgrade steps. 2 tracked.
sipcrack has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-07-26. Highest priority: CVE-2017-11655 (score 58/100).
- CVE-2017-11655 HIGH 7.5 DOWNGRADE A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was m
- CVE-2017-11654 MEDIUM 5.9 DOWNGRADE An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 ter
FAQ
How do I fix sipcrack vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sipcrack being exploited right now?
None of the tracked sipcrack CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sipcrack CVE should I patch first?
CVE-2017-11655 currently ranks highest (58/100): A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was m.