CVE-2022-47516: Drachtio Drachtio-Server

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.20. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that leads to a failure of the libsofia-sip-ua/tport/tport.c self assertion.

Affected products

• Drachtio Drachtio-Server: before 0.8.20 (fixed in 0.8.20)

Published 2022-12-18. Last modified 2026-06-17.