CVE-2018-12584

CRITICAL 9.8CVE-2018-12584 · Published 16/07/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
resiprocate resiprocate	`≤ 1.10.2`	No fix yet

Description

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.

References

joachimdezutter.webredirect.org/advisory.html · Broken Link
seclists.org/bugtraq/2018/Aug/14 · Exploit
resiprocate/resiprocate commit 2cb2911 · Patch
lists.debian.org/debian-lts-announce/2018/07/msg00031.html · Mailing List
lists.debian.org/debian-lts-announce/2021/12/msg00029.html · Mailing List
packetstormsecurity.com/files/148856/reSIProcate-1.10.2-Heap-Overflow.html · Exploit
exploit-db.com/exploits/45174 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free