Cloudanix VulnDB

CVE-2007-4924

None

CVSS

—

EPSS

10.7%

Published

Oct 8, 2007

CISA due date

—

The record

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

Affected packages

Ecosystem Package Introduced Fixed
Red Hat:enterprise_linux:5::client opal 0 0:2.2.2-1.1.0.1
Red Hat:enterprise_linux:5::client opal-debuginfo 0 0:2.2.2-1.1.0.1
Red Hat:enterprise_linux:5::client opal-devel 0 0:2.2.2-1.1.0.1
Red Hat:enterprise_linux:5::client_workstation opal 0 0:2.2.2-1.1.0.1
Red Hat:enterprise_linux:5::client_workstation opal-debuginfo 0 0:2.2.2-1.1.0.1
Red Hat:enterprise_linux:5::client_workstation opal-devel 0 0:2.2.2-1.1.0.1
Red Hat:rhel_productivity:5 opal 0 0:2.2.2-1.1.0.1
Red Hat:rhel_productivity:5 opal-debuginfo 0 0:2.2.2-1.1.0.1
Red Hat:rhel_productivity:5 opal-devel 0 0:2.2.2-1.1.0.1

Related vulnerabilities