Severity by source
Network-reachable RTCP parser with no authentication enforced at packet receipt; out-of-bounds read yields limited memory disclosure and potential crash but no write primitive.
Estimated by vuln.today — no official severity rating has been published for this CVE yet.
Lifecycle Timeline
1DescriptionCVE.org
[GHSA-624p-cp8x-6hp6: EchoLink RTCP/SDES: out-of-bounds read]
AnalysisAI
Out-of-bounds read in EchoLink's RTCP/SDES packet processing exposes the application to potential memory disclosure or crash when handling malformed RTCP Source Description (SDES) packets over a network connection. EchoLink, a VoIP-over-internet system for licensed amateur radio operators, processes RTCP control packets as part of its real-time communication protocol stack. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires network reachability to an active EchoLink node's RTCP port, which is open during active VoIP sessions. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Risk signals for this CVE are sparse: no CVSS score or vector was provided, EPSS data is absent, the vulnerability is not listed in CISA KEV, and no POC has been identified. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | A remote attacker within network reach of an EchoLink node crafts a malformed RTCP SDES packet with an invalid or oversized item length field and transmits it to the node's RTCP port. The parser reads beyond the allocated packet buffer, potentially causing the EchoLink process to crash (denial of service) or exposing adjacent memory contents. … |
| Remediation | The primary remediation is to apply the patched package version as distributed through Ubuntu's official security channels. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Buffer Overflow
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today