CVE catalog
CVE-2017-11655
sipcrack: CVE-2017-11655
- Severity
- Low
- Published
- Source
- [NVD] · [CVE record]
- EPSS
- 2.55% · Oct 25, 2026
A memory leak was found in the way SIPcrack 0.2 handled processing of SIP traffic, because a lines array was mismanaged. A remote attacker could potentially use this flaw to crash long-running sipdump network sniffing sessions.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | sipcrack | sid | 0.2-4 | vulnerable |
| Debian | sipcrack | forky | 0.2-4 | vulnerable |
| Debian | sipcrack | trixie | 0.2-4 | vulnerable |
| Debian | sipcrack | bookworm | 0.2-4 | vulnerable |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | sipcrack | source | sid | (unfixed) | unimportant | Not reported | [869803] |
| Debian | sipcrack | source | forky | (unfixed) | unimportant | Not reported | [869803] |
| Debian | sipcrack | source | trixie | (unfixed) | unimportant | Not reported | [869803] |
| Debian | sipcrack | source | bookworm | (unfixed) | unimportant | Not reported | [869803] |