Our Analyses
What it means for your servers
The security stories that matter, explained by our team — with the concrete steps to take.
The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Cybersecurity researchers have flagged a new malware called ZionSiphon that appears to be specifically designed to target Israeli water treatment and desalinat…
Baresip v3.10.1 (2024-03-12) Security Release (possible Denial of Service): A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang…
Baresip v3.10.1 (2024-03-12) Security Release (possible Denial of Service): A wrong or manipulated incoming RTP Timestamp can cause the baresip process to hang…
Xu Biang discovered that missing input sanitising in Sofia-SIP, a SIP User-Agent library could result in denial of service. For the oldstable distribution (bul…
It was discovered that there was a series of heap overflow and integer overflow vulnerabilities in Sofia-SIP, a building block for creating VoIP/SIP and instan…
Denial of service (crash) via a crafted UDP message that leads to internal assert was fixed in sofia-sip, a SIP (Session Initiation Protocol) User-Agent librar…
Missing message length and attributes length checks when handling STUN packages have been fixed in sofia-sip, a SIP (Session Initiation Protocol) User-Agent li…
GNU oSIP v5.3.0 was discovered to contain an integer overflow via the component osip_body_parse_header. (CVE-2022-41550) References: - https://bugs.mageia.org/…
Two vulnerabilities were fixed in the reSIProcate SIP stack. CVE-2017-11521
A serious cross-site scripting (XSS) vulnerability existed in the Session Initiation Protocol (SIP) managing VoIP…XSS Vulnerability In SIP Protocol Risks RCE A…
Update to v1.4.3 (rhbz#2549665): Security fixes: - [SEC] Fix potential buffer overflow in Record&Play plugin (PR #3688) - [SEC] Fix master/helper session switc…
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Baresip v4.12.0 (2026-09-30) Feature: Send Custom X-Headers on Outbound Calls audio: thread-safe usage of psize and ptime in tx_thread() jbuf: safer jbuf_set_i…
Several security issues were fixed in PJSIP.
Multiple vulnerabilities have been discovered in Sofia-SIP, the worst of which can lead to remote code execution.
Microsoft has shared details of a now-patched flaw in Apple macOS that could be abused by threat actors with root access to bypass security enforcements and pe…
Several security issues were fixed in Sofia-SIP.
Multiple vulnerabilities have been found in PJSIP, the worst of which could result in arbitrary code execution.
Multiple security vulnerabilities have been disclosed in softphone software from Linphone and MicroSIP that could be exploited by an unauthenticated remote adv…
Multiple vulnerabilities have been found in PJSIP, the worst of which could result in a Denial of Service condition.
The popular content writing and sharing platform Medium had a serious security flaw. The vulnerability basically existed in the MediumVulnerability In Medium P…
Upstream release 1.13.19. Patch for out-of-bounds read in msg_multipart_parse().
Upstream release 1.13.19. Patch for out-of-bounds read in msg_multipart_parse().
