CVE-2022-24786

CVE-2022-24786 affects PJSIP (PJPROJECT) versions 2.12 and earlier. The root cause is that PJMEDIA RTC PTS/RPSI feedback parsing does not correctly handle RTCP RPSI packets, enabling an impact to applications that directly call pjmedia_rtcp_fb_parse_rpsi(). The issue is documented with a patch av...

[SECURITY] [DLA 2962-2] pjproject regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2962-2 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 31, 2022 https://wiki.debian.org/LTS -...

DLA-2962-2 pjproject - regression update

Bulletin has no description...

Debian DLA-2962-1 : pjproject - LTS security update

The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2962 advisory. Multiple security issues were discovered in pjproject, is a free and open source multimedia communication library. CVE-2021-32686 A race condition between callback...

Debian: Security Advisory (DLA-2962-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2962-1] pjproject security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2962-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 28, 2022 https://wiki.debian.org/LTS -...

DLA-2962-1 pjproject - security update

Bulletin has no description...

CVE-2022-24764 Stack buffer overflow in pjproject

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API pjmediasdpprint, pjmediasdpmediaprint. Applications that do not use PJSUA2 and do not directly...

CVE-2022-24764 Stack buffer overflow in pjproject

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API pjmediasdpprint, pjmediasdpmediaprint. Applications that do not use PJSUA2 and do not directly...

Out-of-Bounds Read

pjproject is vulnerable to out of bounds read. The vulnerability exists due to a lack of validation of filename allowing an attacker to read out of bounds when the filename is shorter than 4 characters...

Denial Of Service (DoS)

pjproject is vulnerable to denial of service. The vulnerability exists due to a buffer overflow in PJSUA API when calling pjsuacalldump which allows an attacker to crash the application via malicious input...

Buffer Overflow

pjproject is vulnerable to buffer overflow. The vulnerability exists due to a stack overflow in PJSUA API when calling pjsuaplaylistcreate...

Buffer Overflow

pjproject is vulnerable to buffer overflow. The vulnerability exists due to a stack overflow in PJSUA API when calling pjsuarecordercreate...

Out-of-Bounds Read

pjproject is vulnerable to out of bounds read. The vulnerability exists due to a lack of validation of incoming RTP/RTCP packets...

Out-of-Bounds Read

pjproject is vulnerable to out of bounds read. The vulnerability exists due to a lack of validation of incoming SIP message that contains a malformed multipart...

Buffer Overflow

pjproject is vulnerable to buffer overflow. The vulnerability exists due to a stack overflow in PJSUA API when calling pjsuaplayercreate...

Remote Code Execution (RCE)

pjproject is vulnerable to remote code execution. An attacker may exploit the vulnerability by sending a specially crafted UDP STUN message that could remotely execute arbitrary code on the victims machine...

Out-of-Bounds Read

pjproject is vulnerable to out of bounds read. The vulnerability exists in pjmediartcpxrrxrtcpxr of rtcpxr.c due to a lack of validation of received packet size which allows an attacker to send a RTCP XR message with an invalid packet size...

Out-of-Bounds Read

pjproject is vulnerable to out of bounds read. The vulnerability exists due to the incoming RTCP BYE message contains a reason's length, this declared length is not checked against the actual received packet size, potentially resulting in an out-of-bound read access...

Denial Of Service (DoS)

pjproject is vulnerable to denial of service. The vulnerability exists due to a race condition where a function returns without releasing the currently held locks...