Drachtio vulnerabilities
We track 3 vulnerabilities in Drachtio products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2022.
Latest Drachtio vulnerabilities
- 7.5 High severity
Drachtio-server: Off-by-one Error
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that causes a url_canonize2 heap-based buffer over-read because of an off-by-one
- 7.5 High severity
Drachtio-server: Reachable Assertion
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion.
- 7.5 High severity
Drachtio-server: Improper Null Termination
An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a long message in a TCP request that leads to std::length_error.