CVE-2022-47516: High severity drachtio drachtio-server vulnerability
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/sofia-sipto a version that resolves this vulnerability.Fixed in 1.12.11+20110422.1+1e14eea~dfsg-6Fixed in 1.12.11+20110422.1+1e14eea~dfsg-6.1 - Upgrade
Upgrade
debian/sofia-sipto a version that resolves this vulnerability.Fixed in 1.12.11+20110422.1+1e14eea~dfsg-5
Event History
Frequently Asked Questions
What is the severity of CVE-2022-47516?
CVE-2022-47516 has a severity level that can cause a denial of service resulting in a daemon crash.
How do I fix CVE-2022-47516?
To fix CVE-2022-47516, upgrade the affected Drachtio server to version 0.8.20 or later and Sofia-SIP to approved versions.
What components are affected by CVE-2022-47516?
CVE-2022-47516 affects the Drachtio server versions earlier than 0.8.20 and specific versions of Sofia-SIP.
Can CVE-2022-47516 be exploited remotely?
Yes, CVE-2022-47516 can be exploited via crafted UDP messages from remote attackers.
What is the potential impact of CVE-2022-47516?
The potential impact of CVE-2022-47516 is a denial of service, causing the application to crash.