sofia-sip vulnerabilities and fixes

Recent CVEs affecting sofia-sip, with upgrade or downgrade steps. 5 tracked.

Also searched as: sofia sip.

sofia-sip has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-05-26. Highest priority: CVE-2022-31003 (score 70/100).

• CVE-2023-32307 HIGH 7.5 UPGRADE MITIGATE Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring t
• CVE-2023-22741 CRITICAL 9.8 UPGRADE Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification
• CVE-2022-31003 CRITICAL 9.1 UPGRADE MITIGATE Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library
• CVE-2022-31002 HIGH 7.5 UPGRADE MITIGATE Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library
• CVE-2022-31001 HIGH 7.5 UPGRADE MITIGATE Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library

FAQ

How do I fix sofia-sip vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is sofia-sip being exploited right now?

None of the tracked sofia-sip CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which sofia-sip CVE should I patch first?

CVE-2022-31003 currently ranks highest (70/100): Sofia-SIP is an open-source Session Initiation Protocol (SIP) User-Agent library.

RSS feed for sofia-sip · ← Back to latest CVEs