Project

General

Profile

Actions
Copy link

Bug #7093

closed

sip: wrong slice used for sip_take_line with tcp leads to quadratic oom

Added by Philippe Antoine 5 months ago. Updated 4 months ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
8.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

Found by oss-fuzz:
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=69592

Subtasks 1 (0 open — 1 closed)

Security #7094: sip: unbounded number of transactions (7.0.x backport)RejectedActions
Actions
Copy link
 #1

Updated by OISF Ticketbot 5 months ago

  • Subtask #7094 added
Actions
Copy link
 #2

Updated by OISF Ticketbot 5 months ago

  • Label deleted (Needs backport to 7.0)
Actions
Copy link
 #3

Updated by Philippe Antoine 5 months ago

  • Subject changed from sip: unbounded number of transactions to sip: wrong slice used for sip_take_line with tcp leads to quadratic oom

I think there is no need to backport as SIP over TCP is only in master

Actions
Copy link
 #4

Updated by Victor Julien 5 months ago

If there is only an issue in master, I think it can go public and be downgraded to "bug".

Actions
Copy link
 #5

Updated by Philippe Antoine 5 months ago

  • Tracker changed from Security to Bug
  • Severity deleted (MODERATE)
  • Disclosure Date deleted (09/11/2024)
Actions
Copy link
 #6

Updated by Philippe Antoine 5 months ago

  • Status changed from New to Closed
Actions
Copy link
 #7

Updated by Philippe Antoine 5 months ago

  • Private changed from Yes to No
Actions
Copy link

Also available in: Atom PDF