Lucene search
Redhat.comRH:CVE-2022-21723HistoryMay 20, 2022 - 11:43 p.m.
CVE-2022-21723
2022-05-2023:43:44
redhat.com
access.redhat.com
18
pjsip
multimedia communication
sip
sdp
rtp
stun
turn
ice
vulnerability
parsing
out-of-bound access
EPSS
0.005
Percentile
77.6%
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause out-of-bound read access. This issue affects all PJSIP users that accept SIP multipart. The patch is available as commit in the master branch. There are no known workarounds.
Related
prion
prion
Design/Logic Flaw
2022-01-27 00:15:00
cve
cve
CVE-2022-21723
2022-01-27 00:15:07
debiancve
debiancve
CVE-2022-21723
2022-01-27 00:15:07
veracode
veracode
Out-of-Bounds Read
2022-03-12 15:02:39
osv
osv
CVE-2022-21723
2022-01-27 00:15:07
pjproject - security update
2022-03-28 00:00:00
ring - security update
2023-08-29 00:00:00
alpinelinux
alpinelinux
CVE-2022-21723
2022-01-27 00:15:07
nvd
nvd
CVE-2022-21723
2022-01-27 00:15:07
ubuntucve
ubuntucve
CVE-2022-21723
2022-01-27 00:00:00
cvelist
cvelist
CVE-2022-21723 Out-of-bounds read in multipart parsing in PJSIP
2022-01-27 00:00:00
freebsd
freebsd
asterisk -- multiple vulnerabilities
2022-03-03 00:00:00
openvas
openvas
Asterisk Multiple Vulnerabilities (AST-2022-004, AST-2022-005, AST-2022-006)
2022-03-08 00:00:00
Debian: Security Advisory (DLA-2962-1)
2022-03-29 00:00:00
Debian: Security Advisory (DSA-5285-1)
2022-11-19 00:00:00
nessus
nessus
FreeBSD : asterisk -- multiple vulnerabilities (964c5460-9c66-11ec-ad3a-001999f8d30b)
2022-03-05 00:00:00
Debian DLA-2962-1 : pjproject - LTS security update
2022-03-30 00:00:00
GLSA-202210-37 : PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00
debian
debian
[SECURITY] [DLA 2962-1] pjproject security update
2022-03-28 14:23:21
[SECURITY] [DSA 5285-1] asterisk security update
2022-11-17 21:42:58
[SECURITY] [DLA 3194-1] asterisk security update
2022-11-17 11:35:25
gentoo
gentoo
PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00
ubuntu
ubuntu
Ring vulnerabilities
2023-10-09 00:00:00
Ring vulnerabilities
2023-10-24 00:00:00