Critical
Security advisory
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2018-12584
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 12:26 UTC · Revision 1
Source evidence
The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.
osv:CVE-2018-12584
Complete source record
{
"id": "fd48e2676a4b5450893a8c466a50273d1885aacabadf974e1a8502f91b50f835",
"url": "https://osv.dev/vulnerability/CVE-2018-12584",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2018-12584",
"summary": "The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.",
"evidence": "osv:CVE-2018-12584",
"products": [],
"severity": "critical",
"structured": {
"id": "CVE-2018-12584",
"aliases": [
"CVE-2018-12584"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/resiprocate/resiprocate",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"last_affected": "dd6e415b5abccc6ed78958837e1730ba72733a91"
},
{
"fixed": "2cb291191c93c7c4e371e22cb89805a5b31d6608"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:resiprocate:resiprocate:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "1.10.2"
}
],
"source": "CPE_RANGE"
},
{
"range": [
{
"fixed": "2cb291191c93c7c4e371e22cb89805a5b31d6608"
}
],
"source": "REFERENCES_COMMIT"
}
]
}
}
],
"versions": [
"resiprocate-1.11.0_beta2",
"resiprocate-1.11.0_beta1",
"resiprocate-1.11.0_alpha11",
"resiprocate-1.11.0_alpha10",
"resiprocate-1.11.0_alpha9",
"resiprocate-1.11.0_alpha8",
"resiprocate-1.11.0_alpha7",
"resiprocate-1.11.0_alpha6",
"resiprocate-1.11.0_alpha5",
"resiprocate-1.11.0_alpha4",
"resiprocate-1.11.0_alpha3",
"resiprocate-1.11.0_alpha2",
"resiprocate-1.11.0_alpha1",
"resiprocate-1.10.2",
"resiprocate-1.10.1",
"resiprocate-1.10.0",
"resiprocate-1.10.0_beta2",
"resiprocate-1.10.0_beta1",
"resiprocate-1.10.0_alpha4",
"resiprocate-1.10.0_alpha3"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-12584.json",
"vanir_signatures": [
{
"id": "CVE-2018-12584-1f61868f",
"digest": {
"threshold": 0.9,
"line_hashes": [
"178007103552507550579810376132377140385",
"173992908705831645411808277503224922305",
"50554873215173466783289028907298373026",
"98168916845416611335407520653460520446",
"74814719768476633761236422036907966049",
"85034238564629132549601043780386375497",
"132171870175668759357258859621412560200",
"117434914664648003928238649723361089808",
"232812770327501620566202059740027415932",
"226851229450964725983602165267031443005",
"39761695400498134734070570780654339565",
"262377287743590938540800189458590266101",
"84809140518011335890828229181535224530",
"313034784951355725028364086318449601377",
"248522007255775402721843824164126429923",
"20886035095101740777309533583067574114",
"76389818129287673917936469876338961422",
"10011605700828042744260629277411451287",
"80441884412579238464548431153228920050"
]
},
"source": "https://github.com/resiprocate/resiprocate/commit/2cb291191c93c7c4e371e22cb89805a5b31d6608",
"target": {
"file": "resip/stack/ConnectionBase.cxx"
},
"deprecated": false,
"signature_type": "Line",
"signature_version": "v1"
},
{
"id": "CVE-2018-12584-30592e15",
"digest": {
"length": 7206,
"function_hash": "100331230615351000510461227701829668167"
},
"source": "https://github.com/resiprocate/resiprocate/commit/2cb291191c93c7c4e371e22cb89805a5b31d6608",
"target": {
"file": "resip/stack/ConnectionBase.cxx",
"function": "ConnectionBase::preparseNewBytes"
},
"deprecated": false,
"signature_type": "Function",
"signature_version": "v1"
}
],
"vanir_signatures_modified": "2026-10-20T13:32:58Z"
}
}
],
"modified": "2026-10-20T13:32:58.151364645Z",
"provider": "osv",
"references": [
"https://lists.debian.org/debian-lts-announce/2018/07/msg00031.html",
"https://lists.debian.org/debian-lts-announce/2021/12/msg00029.html",
"https://github.com/resiprocate/resiprocate/commit/2cb291191c93c7c4e371e22cb89805a5b31d6608",
"https://packetstormsecurity.com/files/148856/reSIProcate-1.10.2-Heap-Overflow.html",
"https://www.exploit-db.com/exploits/45174/"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*",
"cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*"
],
"vendor_product": "debian:debian_linux",
"extracted_events": [
{
"range": [
{
"introduced": "8.0"
},
{
"last_affected": "8.0"
},
{
"introduced": "9.0"
},
{
"last_affected": "9.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2018-12584",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 387820,
"published_at": "2018-07-16T20:29:00.487+00:00"
}