LiveActive security incident?Get immediate response
CVE Record

CVE-2017-11521: The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allow...

The SdpContents::Session::Medium::parse function in resip/stack/SdpContents.cxx in reSIProcate 1.10.2 allows remote attackers to cause a denial of service (memory consumption) by triggering many media connections.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's TakeAutomated analysismoderate

Security readout for executives and security teams

Plain-English summary

CVE-2017-11521 is a denial-of-service issue in reSIProcate 1.10.2. A remote attacker can make the SDP parser consume excessive memory, potentially disrupting services that process SIP/SDP traffic. The source bundle does not provide CVSS scoring or evidence of active exploitation.

Executive priority

Treat this as an availability risk for voice, SIP, or communications services using reSIProcate. Prioritize patch verification on externally reachable systems, but avoid emergency escalation unless the component is exposed or service availability is critical.

Technical view

The issue is in SdpContents::Session::Medium::parse in resip/stack/SdpContents.cxx. The parser can be driven into excessive memory consumption when handling many media connections, causing an out-of-memory denial of service. References include an upstream security discussion, GitHub PR, and Debian security updates.

Likely exposure

Exposure is most likely where reSIProcate 1.10.2, or downstream packages containing the vulnerable parser, processes SDP from untrusted or semi-trusted network sources.

Exploitation context

The bundled CVE description says remote attackers can cause memory-consumption denial of service. No bundled source reports active exploitation, and the record is not marked CISA KEV.

Researcher notes

Evidence is limited to a remote memory-exhaustion DoS description, upstream discussion, a GitHub PR, and Debian advisories. The bundle provides no CVSS, CWE, detailed affected CPEs, exploit status, or comprehensive fixed-version matrix.

Mitigation direction

  • Identify any use of reSIProcate 1.10.2 or downstream resiprocate packages.
  • Apply relevant upstream or distribution security updates for resiprocate.
  • For Debian systems, review the cited DLA advisories for fixed package guidance.
  • Check upstream reSIProcate guidance and PR 88 before relying on source builds.
  • Reduce exposure of SDP-processing services until patched, where operationally feasible.

Validation and detection

  • Inventory applications and packages that include reSIProcate or resiprocate.
  • Confirm installed versions against vendor or distribution security update records.
  • Verify whether SIP/SDP parsing is reachable from untrusted networks.
  • Review service memory telemetry for abnormal consumption during SDP handling.
  • Confirm patched builds include the upstream or distro remediation.
Prepared
Confidence
medium
Sources
6

Public sources used

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2017-11521 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
5Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.