handle_messages in eXtl_tls.c in eXosip before 5.0.0 mishandles a negative value in a content-length header.
Vector
NETWORK
Complexity
LOW
Authentication
NONE
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE
Advisory | Patch | Confirmed | Link |
---|---|---|---|
http://git.savannah.nongnu.org/cgit/exosip.git/commit/?i... |