Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification. Referring to [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54), several other potential heap-over-flow and integer-overflow in stun_parse_attr_error_code and stun_parse_attr_uint32 were found because the lack of attributes length check when Sofia-SIP handles STUN packets. The previous patch of [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54) fixed the vulnerability when attr_type did not match the enum value, but there are also vulnerabilities in the handling of other valid cases. The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. These issue have been addressed in version 1.13.15. Users are advised to upgrade.

The remote host is affected by the vulnerability described in GLSA-202407-10 (Sofia-SIP: Multiple Vulnerabilities)

    Multiple vulnerabilities have been discovered in Sofia-SIP. Please review the CVE identifiers referenced     below for details.

Tenable has extracted the preceding description block directly from the Gentoo Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-b9c02df30f advisory.

    Security fix for CVE-2023-32307

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 host has packages installed that are affected by a vulnerability as referenced in the USN-6448-1 advisory.

    Xu Biang discovered that Sofia-SIP did not properly manage memory when handling STUN packets. An attacker     could use this issue to cause Sofia-SIP to crash, resulting in a denial of service, or possibly execute     arbitrary code.

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5431 advisory.

  - Sofia-SIP is an open-source SIP User-Agent library, compliant with the IETF RFC3261 specification.
    Referring to [GHSA-8599-x7rq-fr54](https://github.com/freeswitch/sofia-     sip/security/advisories/GHSA-8599-x7rq-fr54), several other potential heap-over-flow and integer-overflow     in stun_parse_attr_error_code and stun_parse_attr_uint32 were found because the lack of attributes length     check when Sofia-SIP handles STUN packets. The previous patch of [GHSA-8599-x7rq-     fr54](https://github.com/freeswitch/sofia-sip/security/advisories/GHSA-8599-x7rq-fr54) fixed the     vulnerability when attr_type did not match the enum value, but there are also vulnerabilities in the     handling of other valid cases. The OOB read and integer-overflow made by attacker may lead to crash, high     consumption of memory or even other more serious consequences. These issue have been addressed in version     1.13.15. Users are advised to upgrade. (CVE-2023-32307)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3441 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3441-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/                           Chris Lamb     June 02, 2023                                 https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : sofia-sip     Version        : 1.12.11+20110422.1-2.1+deb10u4     CVE ID         : CVE-2023-32307     Debian Bug     : 1036847

    It was discovered that there was a series of heap overflow and     integer overflow vulnerabilities in Sofia-SIP, a building block for     creating VoIP/SIP and instant messaging applications.

    For Debian 10 buster, this problem has been fixed in version     1.12.11+20110422.1-2.1+deb10u4.

    We recommend that you upgrade your sofia-sip packages.

    For the detailed security status of sofia-sip please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/sofia-sip

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
201914	GLSA-202407-10 : Sofia-SIP: Multiple Vulnerabilities	Nessus	Gentoo Local Security Checks	critical
191036	Fedora 38 : sofia-sip (2024-b9c02df30f)	Nessus	Fedora Local Security Checks	high
183773	Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 LTS / 23.04 / 23.10 : Sofia-SIP vulnerability (USN-6448-1)	Nessus	Ubuntu Local Security Checks	high
177404	Debian DSA-5431-1 : sofia-sip - security update	Nessus	Debian Local Security Checks	high
176638	Debian dla-3441 : libsofia-sip-ua-dev - security update	Nessus	Debian Local Security Checks	high

Detections

Analytics

CVE-2023-32307

high

Tenable Plugins

critical

high

high

high

high