[代理镜像] Belledonne Belle-sip before 4.5.20, as used in Linphone... · CVE-2021-33056 · GitHub Advisory Database · GitHub

豆豆友情提示：这是一个非官方 GitHub 代理镜像，主要用于网络测试或访问加速。请勿在此进行登录、注册或处理任何敏感信息。进行这些操作请务必访问官方网站 github.com。 Raw 内容也通过此代理提供。

Belledonne Belle-sip before 4.5.20, as used in Linphone...

High severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated May 24, 2022

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message.

References

Published to the GitHub Advisory Database May 24, 2022

Last updated May 24, 2022

Weaknesses

CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination. Learn more on MITRE.