CVE-2022-47517: Drachtio Drachtio-Server

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in the libsofia-sip fork in drachtio-server before 0.8.19. It allows remote attackers to cause a denial of service (daemon crash) via a crafted UDP message that causes a url_canonize2 heap-based buffer over-read because of an off-by-one error.

Affected products

• Drachtio Drachtio-Server: before 0.8.19 (fixed in 0.8.19)

Published 2022-12-18. Last modified 2026-06-17.