<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="" style="caret-color: rgb(14, 16, 26); color: rgb(14, 16, 26); margin-top: 0pt; margin-bottom: 0pt;"><span data-preserver-spaces="true" class="" style="margin-top: 0pt; margin-bottom: 0pt;">Hi David,</span></div><div class="" style="caret-color: rgb(14, 16, 26); color: rgb(14, 16, 26); margin-top: 0pt; margin-bottom: 0pt;"><br class=""></div><div class="" style="caret-color: rgb(14, 16, 26); color: rgb(14, 16, 26); margin-top: 0pt; margin-bottom: 0pt;"><span data-preserver-spaces="true" class="" style="margin-top: 0pt; margin-bottom: 0pt;">I believe it was originally found by Enable Security;</span></div><div class="" style="caret-color: rgb(14, 16, 26); color: rgb(14, 16, 26); margin-top: 0pt; margin-bottom: 0pt;"><br class=""></div><div class="" style="caret-color: rgb(14, 16, 26); color: rgb(14, 16, 26); margin-top: 0pt; margin-bottom: 0pt;"><a target="_blank" href="https://www.rtcsec.com/article/smuggling-sip-headers-past-sbc/" class="editor-rtfLink" style="margin-top: 0pt; margin-bottom: 0pt; color: rgb(74, 110, 224);"><span data-preserver-spaces="true" class="" style="margin-top: 0pt; margin-bottom: 0pt;">https://www.rtcsec.com/article/smuggling-sip-headers-past-sbc/</span></a></div><div class="" style="caret-color: rgb(14, 16, 26); color: rgb(14, 16, 26); margin-top: 0pt; margin-bottom: 0pt;"><br class=""></div><div class="" style="caret-color: rgb(14, 16, 26); color: rgb(14, 16, 26); margin-top: 0pt; margin-bottom: 0pt;"><span data-preserver-spaces="true" class="" style="margin-top: 0pt; margin-bottom: 0pt;">Although happy to be corrected if they were not the original reporters.</span></div><div class="" style="caret-color: rgb(14, 16, 26); color: rgb(14, 16, 26); margin-top: 0pt; margin-bottom: 0pt;"><br class=""></div><div class="" style="caret-color: rgb(14, 16, 26); color: rgb(14, 16, 26); margin-top: 0pt; margin-bottom: 0pt;"><span data-preserver-spaces="true" class="" style="margin-top: 0pt; margin-bottom: 0pt;">Dan</span></div><div><br class=""><blockquote type="cite" class=""><div class="">On 1 Dec 2021, at 22:13, David Villasmil <<a href="mailto:david.villasmil.work@gmail.com" class="">david.villasmil.work@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="auto" class="">Anyone knows about this?</div><div dir="auto" class=""><br class=""></div><div class=""><a href="https://nvd.nist.gov/vuln/detail/CVE-2020-28361" class="">https://nvd.nist.gov/vuln/detail/CVE-2020-28361</a></div>-- <br class=""><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div class="">Regards,</div><div class=""><br class=""></div>David Villasmil<div class="">email: <a href="mailto:david.villasmil.work@gmail.com" target="_blank" class="">david.villasmil.work@gmail.com</a></div><div class="">phone: +34669448337</div></div></div>
__________________________________________________________<br class="">Kamailio - Users Mailing List - Non Commercial Discussions<br class=""> * <a href="mailto:sr-users@lists.kamailio.org" class="">sr-users@lists.kamailio.org</a><br class="">Important: keep the mailing list in the recipients, do not reply only to the sender!<br class="">Edit mailing list options or unsubscribe:<br class=""> * <a href="https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users" class="">https://lists.kamailio.org/cgi-bin/mailman/listinfo/sr-users</a><br class=""></div></blockquote></div><br class=""></body></html>