Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
It was discovered that there was a series of heap overflow and integer overflow vulnerabilities in Sofia-SIP, a building block for creating VoIP/SIP and instan…
GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header. (CVE-2022-41550) References: - https://bugs.mageia.org/…
Two vulnerabilities were fixed in the reSIProcate SIP stack. CVE-2017-11521
A serious cross-site scripting (XSS) vulnerability existed in the Session Initiation Protocol (SIP) managing VoIP…XSS Vulnerability In SIP Protocol Risks RCE A…
Update to v1.4.3 (rhbz#2549665): Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switc…
Multiple vulnerabilities have been discovered in Sofia-SIP, the worst of which can lead to remote code execution.
Microsoft has shared details of a now-patched flaw in Apple macOS that could be abused by threat actors with root access to bypass security enforcements and pe…
Several security issues were fixed in Sofia-SIP.
Multiple vulnerabilities have been found in PJSIP, the worst of which could result in arbitrary code execution.
Multiple security vulnerabilities have been disclosed in softphone software from Linphone and MicroSIP that could be exploited by an unauthenticated remote adv…
Multiple vulnerabilities have been found in PJSIP, the worst of which could result in a Denial of Service condition.
The popular content writing and sharing platform Medium had a serious security flaw. The vulnerability basically existed in the MediumVulnerability In Medium P…
Upstream release 1.13.19. Patch for out-of-bounds read in msg_multipart_parse().
Upstream release 1.13.19. Patch for out-of-bounds read in msg_multipart_parse().
Fix CVE-2026-25554
The OOB read and integer-overflow made by attacker may lead to crash, high consumption of memory or even other more serious consequences. (CVE-2023-32307) Refe…
The config_sortlist function is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow and thus may cau…
Missing message length and attributes length checks** when it handles STUN packets, leading to controllable heap-over-flow (CVE-2023-22741) References: - https…
An update that fixes one vulnerability is now available.
An update that fixes one vulnerability is now available.
An attacker can send a message with evil sdp to FreeSWITCH, which may a cause a crash due to an out-of-bounds access. (CVE-2022-31001) An attacker can send a m…
Update to v1.4.3 (rhbz#2549665): Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switc…
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
