Approved changes feed: RSS · Atom

cpe:2.3:a:drachtio:drachtio-server:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDrachtio (588393af-9094-516a-a613-23fcd0222cbe)
ProductDrachtio Server (ba32b9c9-c0e2-59af-a237-c28f4729f7d9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/drachtio/drachtio-server purl2cpe 2026-06-01 10:13:02.846266
pkg:github/drachtio/drachtio-server purl2cpe 2026-06-01 10:13:02.846269

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-47517 vulnerable 2026-06-08 05:50:40.660742 Details available
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that causes a url_canonize2 heap-based buffer over-read because of an off-by-one error.
Published: 2022-12-18T00:00:00.000Z
Updated: 2025-04-17T18:51:28.845Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47516 vulnerable 2026-06-08 05:50:40.660275 Details available
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion.
Published: 2022-12-18T00:00:00.000Z
Updated: 2025-04-17T18:54:54.345Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-47515 vulnerable 2026-06-08 05:50:40.659746 Details available
An issue was discovered in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a long message in a TCP request that leads to std::length_error.
Published: 2022-12-18T00:00:00.000Z
Updated: 2025-04-17T15:04:37.549Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-45909 vulnerable 2026-06-08 05:50:37.483208 Details available
drachtio-server before 0.8.19 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
Published: 2022-11-26T00:00:00.000Z
Updated: 2025-04-25T19:20:12.306Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.