Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2017-16875
HistoryNov 17, 2017 - 4:29 p.m.

CVE-2017-16875

2017-11-1716:29:00
Debian Security Bug Tracker
security-tracker.debian.org
7

EPSS

0.003

Percentile

65.7%

An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.

OSVersionArchitecturePackageVersionFilename
Debian9allpjproject< 2.5.5~dfsg-6+deb9u1pjproject_2.5.5~dfsg-6+deb9u1_all.deb

EPSS

0.003

Percentile

65.7%