Skip to main content

Security Advisories

Published security advisories covering vulnerabilities in VoIP, WebRTC, and telecommunications software by Enable Security.

security advisories
    Nov 20, 2020

    sngrep: stack overflow via malformed SDP connection address

    Nov 6, 2020

    Asterisk: crash via INVITE flood over TCP Medium 5.3

    Sep 1, 2020

    Kamailio: header smuggling via remove_hf bypass Medium 5.4

    Mar 19, 2018

    Kamailio: off-by-one heap overflow Critical 9.8

    Feb 22, 2018

    Asterisk PJSIP: stack corruption via large Accept header in SUBSCRIBE High 7.5

    Feb 22, 2018

    Asterisk PJSIP: crash via repeated INVITE messages over TCP/TLS Medium 6.5

    Feb 22, 2018

    Asterisk PJSIP: crash via invalid SDP media format description High 7.5

    Feb 22, 2018

    Asterisk PJSIP: crash via invalid SDP fmtp attribute High 7.5

    Sep 1, 2017

    Asterisk: RTP Bleed vulnerability High 7.5

    May 23, 2017

    Asterisk PJSIP: heap overflow in CSeq header parsing High 7.5

    Subscribe

    Receive high-quality, low-volume RTC security research, news and occasional updates about what we're up to.

    Interested in our services? Let's collaborate.
    Get in touch

    We hate spam and are committed to protecting and respecting your privacy. You can unsubscribe from our communications at any time. By subscribing, you are agreeing to the Privacy Policy.