The vulnerability of the implementations of the functions pjmedia_sdp_print() and pjmedia_sdp_media_print() in the PJSUA2 API of the multimedia communication library PJSI allows a perpetrator to execute arbitrary code or cause a service failure.

The vulnerability of the pjmediasdpprint and pjmediasdpmediaprint functions in the PJSUA2 API of the PJSIP multimedia communication library is related to buffer overflows in the stack. Exploitation of this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

DEBIAN-CVE-2022-24764

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API pjmediasdpprint, pjmediasdpmediaprint. Applications that do not use PJSUA2 and do not directly...

UBUNTU-CVE-2021-26717

An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6. When re-negotiating for T.38, if the initial remote response was delayed just enough, Asterisk would send both audio and T.38 in the SDP. If this...

Asterisk PJSIP Invalid Media Attribute Denial Of Service (CVE-2018-1000099)

A denial-of-service vulnerability exists in Asterisk PJSIP. The vulnerability is due to improper validation of SDP Media Attributes. Successful exploitation can result in denial-of-service conditions...