SIP: Invalid SDP Connection Information Value

This signature detects SDP payloads within a Session Initiation Protocol (SIP) packet that contains illegal values in the Connection Information header. The Connection Network Type should always be "IN," while the Connection Address Type should always be "IP4" or "IP6." Any other values trigger this signature.

Short Name
VOIP:SIP:SDP:INV-CI
Severity
Warning
Recommended
False
Recommended Action
Drop Packet
Category
VOIP
Keywords
Connection Information Invalid SDP Value
Release Date
11/30/2006
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Unknown

Found a potential security threat?