CVE-2007-4924: The Open Phone Abstraction Library (opal), as… (CVSS 5.0)

Description

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

Exploit likelihood

10.7%Down 1.9 points since Feb 4, 2022

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`opal` Red Hat:enterprise_linux:5::client_workstation	before 0:2.2.2-1.1.0.1	0:2.2.2-1.1.0.1
`opal-debuginfo` Red Hat:enterprise_linux:5::client_workstation	before 0:2.2.2-1.1.0.1	0:2.2.2-1.1.0.1
`opal-devel` Red Hat:enterprise_linux:5::client_workstation	before 0:2.2.2-1.1.0.1	0:2.2.2-1.1.0.1
`opal` Red Hat:enterprise_linux:5::client	before 0:2.2.2-1.1.0.1	0:2.2.2-1.1.0.1
`opal-debuginfo` Red Hat:enterprise_linux:5::client	before 0:2.2.2-1.1.0.1	0:2.2.2-1.1.0.1
`opal` Red Hat:rhel_productivity:5	before 0:2.2.2-1.1.0.1	0:2.2.2-1.1.0.1
`opal-debuginfo` Red Hat:rhel_productivity:5	before 0:2.2.2-1.1.0.1	0:2.2.2-1.1.0.1
`opal-devel` Red Hat:rhel_productivity:5	before 0:2.2.2-1.1.0.1	0:2.2.2-1.1.0.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	OpenH323 Opal SIP Protocol - Remote Denial of Service	2009-07-24

What each source reports

NVD Score used5.0

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

Record: CVE-2007-4924
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE ListNo score

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

Record: CVE-2007-4924
Updated: 2026-11-02

EUVDEUVD-2007-4905No score

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

Record: EUVD-2007-4905
Updated: 2026-11-03

GitHub AdvisoriesGHSA-55xh-gq2p-rgv2No score

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323...

The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remote attackers to cause a denial of service (crash) via an invalid Content-Length header field in Session Initiation Protocol (SIP) packets, which causes a \0 byte to be written to an "attacker-controlled address."

Record: GHSA-55xh-gq2p-rgv2
Weakness: CWE-20
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	affected, aliases, exploits, facts, references, title	Exploit-DB, GitHub Advisories, OSV
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 23 moreShow less