critical9.1
CVE-2022-45909
drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
Impact
drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drachtio | Drachtio-Server | before 0.8.19 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/drachtio/drachtio-server/commit/a63d01854987d9fd846cdc9265af38ee9eb72490
- https://github.com/drachtio/drachtio-server/compare/v0.8.18...v0.8.19
- https://github.com/drachtio/drachtio-server/pull/238
- https://github.com/drachtio/drachtio-server/commit/a63d01854987d9fd846cdc9265af38ee9eb72490
- https://github.com/drachtio/drachtio-server/compare/v0.8.18...v0.8.19
- https://github.com/drachtio/drachtio-server/pull/238