CVE catalog

CVE-2008-1959

sip-tester: CVE-2008-1959

[CVE catalog]

Severity
Medium
Published
Source
[NVD] · [CVE record]
EPSS
3.48% · Oct 27, 2026

Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SIP message. NOTE: some of these details are obtained from third party information.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiansip-testersid1:3.8.0-1fixed
Debiansip-testerforky1:3.8.0-1fixed
Debiansip-testertrixie1:3.7.3-2fixed
Debiansip-testerbookworm1:3.6.1-1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiansip-testersourcesid2.0.1-1.2lowNot reported[479039]
Debiansip-testersourceforky2.0.1-1.2lowNot reported[479039]
Debiansip-testersourcetrixie2.0.1-1.2lowNot reported[479039]
Debiansip-testersourcebookworm2.0.1-1.2lowNot reported[479039]

[Debian bug #479039]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [sip-tester]Fixed

    Source package: [sip-tester]

    Details (2)

    • 1:3.6.1-1+b2 · amd64 · bookworm

      Fixed · Fixed: 2.0.1-1.2

      dsa · sip-tester · debian · bookworm; dsa · sip-tester · debian · 12

    • 1:3.6.1-1+b2 · arm64 · bookworm

      Fixed · Fixed: 2.0.1-1.2

      dsa · sip-tester · debian · bookworm; dsa · sip-tester · debian · 12

[Debian 13 (Trixie)]

  • [sip-tester]Fixed
    Details (2)

    • 1:3.7.3-2 · amd64 · trixie

      Fixed · Fixed: 2.0.1-1.2

      dsa · sip-tester · debian · 13

    • 1:3.7.3-2 · arm64 · trixie

      Fixed · Fixed: 2.0.1-1.2

      dsa · sip-tester · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]