Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-16872
HistoryNov 17, 2017 - 9:29 a.m.

Buffer overflow

2017-11-1709:29:00
PRIOn knowledge base
www.prio-n.com
2

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message (like cseq, ttl, port, etc.) all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted back to strings, a buffer overrun. This will lead to a potential exploit using carefully crafted invalid values.

CPENameOperatorVersion
debian_linuxeq9.0
pjsiplt2.7.1

9.4 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%