CVE-2018-12584: Debian Linux

Critical severity, CVSS 9.8. EPSS: 24.3% chance of exploitation in the next 30 days.

The ConnectionBase::preparseNewBytes function in resip/stack/ConnectionBase.cxx in reSIProcate through 1.10.2 allows remote attackers to cause a denial of service (buffer overflow) or possibly execute arbitrary code when TLS communication is enabled.

Affected products

• Debian Debian Linux: version 8.0 only; version 9.0 only
• Resiprocate Resiprocate: up to and including 1.10.2

Published 2018-07-16. Last modified 2026-06-17.