CVE-2021-33056

Belledonne Belle-sip before 4.5.20, as used in Linphone and other products, can crash via an invalid From header in a SIP message.
Configurations

Configuration 1 (hide)

cpe:2.3:a:linphone:belle-sip:*:*:*:*:*:*:*:*

History

23 Aug 2021, 15:26

Type Values Removed Values Added
References (MISC) https://github.com/BelledonneCommunications/belle-sip/commit/116e3eb48fe43ea63eb9f3c4b4b30c48d58d6ff0 - (MISC) https://github.com/BelledonneCommunications/belle-sip/commit/116e3eb48fe43ea63eb9f3c4b4b30c48d58d6ff0 - Patch, Third Party Advisory
References (CONFIRM) https://github.com/BelledonneCommunications/belle-sip/compare/4.5.15...4.5.20 - (CONFIRM) https://github.com/BelledonneCommunications/belle-sip/compare/4.5.15...4.5.20 - Patch, Third Party Advisory
CWE CWE-444
CPE cpe:2.3:a:linphone:belle-sip:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 5.0
v3 : 7.5

12 Aug 2021, 21:43

Type Values Removed Values Added
New CVE

Information

Published : 2021-08-12 21:15

Updated : 2023-12-10 13:55


NVD link : CVE-2021-33056

Mitre link : CVE-2021-33056

CVE.ORG link : CVE-2021-33056


JSON object : View

Products Affected

linphone

  • belle-sip
CWE
CWE-444

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')