PatchTheCVEsipcrack project vulnerabilities
Recent CVEs affecting sipcrack project products. 2 tracked.
sipcrack project has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-07-26. Highest priority: CVE-2017-11655 (score 58/100).
- CVE-2017-11655 HIGH 7.5 DOWNGRADE A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was m
- CVE-2017-11654 MEDIUM 5.9 DOWNGRADE An out-of-bounds read and write flaw was found in the way SIPcrack 0.2 processed SIP traffic, because 0x00 ter
FAQ
How do I fix sipcrack project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sipcrack project being exploited right now?
None of the tracked sipcrack project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sipcrack project CVE should I patch first?
CVE-2017-11655 currently ranks highest (58/100): A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was m.