PatchTheCVElinphone vulnerabilities
Recent CVEs affecting linphone products. 3 tracked.
linphone has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-11-12. Highest priority: CVE-2021-33056 (score 49/100).
- CVE-2021-43611 HIGH 7.5 UPGRADE Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via " \ " in the display name of a
- CVE-2021-43610 HIGH 7.5 UPGRADE Belledonne Belle-sip before 5.0.20 can crash applications such as Linphone via an invalid From header (request
- CVE-2021-33056 HIGH 7.5 UPGRADE Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From head
FAQ
How do I fix linphone vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is linphone being exploited right now?
None of the tracked linphone CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which linphone CVE should I patch first?
CVE-2021-33056 currently ranks highest (49/100): Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From head.