ROS-20220518-03

🗓️ 18 May 2022 00:00:00Reported by RedosType

The "pjproject" multimedia communication library is vulnerable to multiple issues, including infinite loop, boundary errors, memory corruption, and stack buffer overflow, potentially allowing remote attackers to execute arbitrary code and cause denial of service conditions

Reporter	Title	Published	Views	Family All 172
GithubExploit	Exploit for Heap-based Buffer Overflow in Pjsip	6 Apr 202617:33	–	githubexploit
AlpineLinux	CVE-2022-24754	11 Mar 202200:00	–	alpinelinux
AlpineLinux	CVE-2022-24763	30 Mar 202200:00	–	alpinelinux
AlpineLinux	CVE-2022-24764	22 Mar 202200:00	–	alpinelinux
AlpineLinux	CVE-2022-24786	6 Apr 202200:00	–	alpinelinux
AlpineLinux	CVE-2022-24792	25 Apr 202200:00	–	alpinelinux
AlpineLinux	CVE-2022-24793	6 Apr 202200:00	–	alpinelinux
BDU FSTEC	The vulnerability of the implementation of the pjsip_auth_create_digest() function in the multimedia communication library PJSIP allows a intruder to trigger a service failure or execute arbitrary code.	30 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the PJSIP multimedia communication library, related to executing a loop with an unavailable exit condition, allows attackers to cause service failures.	30 May 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the implementation of the pjmedia_rtcp_fb_parse_rpsi() function in the multimedia communication library PJSIP allows a perpetrator to execute arbitrary code or cause a service failure.	30 May 202200:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	pjproject	2.7.2-8	UNKNOWN

18 May 2022 00:00Current

8.5High risk

Vulners AI Score8.5

CVSS 27.5

CVSS 3.19.8

EPSS0.01612

SSVC