Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2007-4924

ekiga remote crash caused by insufficient input validation

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

CVSS 2.0 · 5.0 Medium EPSS 10.7% KEV · Not listed
Vendors
Ekiga Openh323 Project Redhat
Products
Ekiga Openh323 Enterprise Linux
CVE-2004-0097

security flaw

Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

CVSS 2.0 · 10.0 Critical EPSS 10.3% KEV · Not listed
Vendors
Openh323 Project Redhat
Products
Pwlib Enterprise Linux Linux