CVE-2022-45909 - drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request

CRITICAL

drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request

Published Nov 26, 2022

9.1

CRITICAL

CVSS 3.1

EPSS 1.05%

drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.

No remediation recorded yet.

Weaknesses (1)

CWE-125

Out-of-bounds Read

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48754		Advisory
https://github.com/drachtio/drachtio-server/commit/a63d01854987d9fd846cdc9265af38ee9eb72490		PatchThird Party Advisory
https://github.com/drachtio/drachtio-server/compare/v0.8.18...v0.8.19		PatchThird Party Advisory
https://github.com/drachtio/drachtio-server/pull/238		Third Party Advisory