35 matches found
PT-2022-2681 · Pjsip +4 · Pjsip +4
Name of the Vulnerable Software and Affected Versions: PJSIP versions 2.12 and prior Description: The issue is related to a stack buffer overflow vulnerability in the PJSIP multimedia communication library, specifically affecting users of PJSUA2 or those who call the API endpoints pjmedia sdp pri...
ALPINE-CVE-2022-23608
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set or forking scenario, a hash key shared by multiple UAC dialogs can...
ALPINE-CVE-2021-43301
Stack overflow in PJSUA API when calling pjsuaplaylistcreate. An attacker-controlled 'filenames' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation...
UBUNTU-CVE-2021-41141
PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In various parts of PJSIP, when error/failure occurs, it is found that the function returns without releasing the currently...
UBUNTU-CVE-2021-37706
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before...
PJSIP 缓冲区错误漏洞
PJSIP is a free and open source multimedia communications library written in C that implements standards-based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. PJSIP suffers from a buffer error vulnerability that arises from the fact that if an incoming "RTCP BYE" message contains a reason...
FreeSWITCH 1.10.6 SIP Flooding Denial Of Service
FreeSWITCH susceptible to Denial of Service via SIP flooding - Fixed versions: v1.10.7 - Enable Security Advisory: https://github.com/EnableSecurity/advisories/tree/master/ES2021-06-freeswitch-flood-dos - Vendor Security Advisory:...
Belledonne Belle-sip 环境问题漏洞
Belledonne Belle-sip is a library that implements the SIP RFC 3261 transport, transaction, and conversation layers from Belledonne, France. A security vulnerability exists in Belledonne Belle-sip versions prior to 4.5.20, which stems from invalid information in SIP message headers, and can be...
CVE-2020-3226
A vulnerability in the Session Initiation Protocol SIP library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to insufficient sanity...
CVE-2020-3226
A vulnerability in the Session Initiation Protocol SIP library of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to insufficient sanity...
CVE-2020-3226
CVE-2020-3226 concerns a vulnerability in the SIP library used by Cisco IOS and IOS XE, where insufficient sanity checks on received SIP messages can allow an unauthenticated, remote attacker to trigger a device reload, causing a DoS. Affected products are Cisco IOS Software and Cisco IOS XE Soft...
Null pointer dereference
A vulnerability in the common Session Initiation Protocol SIP library of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service DoS condition. The vulnerability is due to insufficient sanity checks ...
UBUNTU-CVE-2016-10325
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipmessagetostr function defined in osipparser2/osipmessagetostr.c, resulting in a remote DoS...
DEBIAN-CVE-2016-10325
In libosip2 in GNU oSIP 4.1.0, a malformed SIP message can lead to a heap buffer overflow in the osipmessagetostr function defined in osipparser2/osipmessagetostr.c, resulting in a remote DoS...
