Back to Database
Status published
Unknown
CVE-2022-47517
An issue was discovered in the libsofia-sip fork in drachtio-server...
Vulnerability Description
An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that causes a url_canonize2 heap-based buffer over-read because of an off-by-one error.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-47517
Credits & Attribution
No credits recorded in the NVD database.
References
More from drachtio
View All →CVE-2022-47516
An issue was discovered in the libsofia-sip fork in drachtio-server...
Unknown
0
CVE-2022-47515
An issue was discovered in drachtio-server before 0.8.20. It allows...
Unknown
0
CVE-2022-45909
drachtio-server before 0.8.19 has a heap-based buffer over-read via a...
Unknown
0
CVE-2022-45474
drachtio-server 0.8.18 has a request-handler.cpp event_cb use-after-free for any request....
Unknown
0
CVE-2022-45473
In drachtio-server 0.8.18, /var/log/drachtio has mode 0777 and drachtio.log has...
Unknown
0
Affected Vendor
drachtio
View all reports →Affected Software
drachtio-server
Vulnerable Versions:
0
Timeline
Official Publish:
December 18th, 2022
Last Modified:
April 17th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.