CVE-2021-43301

2022-02-1621:15:00

Debian Security Bug Tracker

security-tracker.debian.org

0.006 Low

EPSS

Percentile

77.6%

JSON

Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled ‘file_names’ argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.

OSVersionArchitecturePackageVersionFilename
Debian11allasterisk< 1:16.28.0~dfsg-0+deb11u1asterisk_1:16.28.0~dfsg-0+deb11u1_all.deb
Debian10allasterisk< 1:16.28.0~dfsg-0+deb10u1asterisk_1:16.28.0~dfsg-0+deb10u1_all.deb
Debian999allasterisk< 1:18.11.1~dfsg+~cs6.10.40431413-1asterisk_1:18.11.1~dfsg+~cs6.10.40431413-1_all.deb
Debian12allring< 20230206.0~ds1-1ring_20230206.0~ds1-1_all.deb
Debian11allring<= 20210112.2.b757bac~ds1-1ring_20210112.2.b757bac~ds1-1_all.deb
Debian10allring< 20190215.1.f152c98~ds1-1+deb10u2ring_20190215.1.f152c98~ds1-1+deb10u2_all.deb
Debian999allring< 20230206.0~ds1-1ring_20230206.0~ds1-1_all.deb
Debian13allring< 20230206.0~ds1-1ring_20230206.0~ds1-1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	11	all	asterisk	< 1:16.28.0~dfsg-0+deb11u1	asterisk_1:16.28.0~dfsg-0+deb11u1_all.deb
Debian	10	all	asterisk	< 1:16.28.0~dfsg-0+deb10u1	asterisk_1:16.28.0~dfsg-0+deb10u1_all.deb
Debian	999	all	asterisk	< 1:18.11.1~dfsg+~cs6.10.40431413-1	asterisk_1:18.11.1~dfsg+~cs6.10.40431413-1_all.deb
Debian	12	all	ring	< 20230206.0~ds1-1	ring_20230206.0~ds1-1_all.deb
Debian	11	all	ring	<= 20210112.2.b757bac~ds1-1	ring_20210112.2.b757bac~ds1-1_all.deb
Debian	10	all	ring	< 20190215.1.f152c98~ds1-1+deb10u2	ring_20190215.1.f152c98~ds1-1+deb10u2_all.deb
Debian	999	all	ring	< 20230206.0~ds1-1	ring_20230206.0~ds1-1_all.deb
Debian	13	all	ring	< 20230206.0~ds1-1	ring_20230206.0~ds1-1_all.deb

0.006 Low

EPSS

Percentile

77.6%

JSON

Related for DEBIANCVE:CVE-2021-43301