CVE-2018-1000098

Teluu PJSIP (Teluu PJProject) vulnerability CVE-2018-1000098: an Integer Overflow in the pjmedia SDP parser affects version 2.7.1 and earlier, potentially causing a crash when handling a specially crafted message. The issue has been fixed in version 2.7.2. Affected products are PJSIP/PJProject bu...

CVE-2018-1000098

Removed by vendor...

CVE-2018-1000099

Removed by vendor...

PT-2018-9277

Name of the Vulnerable Software and Affected Versions: Teluu PJSIP versions 2.7.1 and earlier Description: The issue is related to an Integer Overflow vulnerability in pjmedia SDP parsing, which can cause a crash. This can be exploited by sending a specially crafted message. Recommendations: For...

Teluu PJSIP Integer Overflow Vulnerability

Teluu PJSIP is an open source, free multimedia communication library written in C. pjmedia SDP is one of the SDP parsers. An integer overflow vulnerability exists in pjmedia SDP parsing in Teluu PJSIP 2.7.1 and earlier versions. An attacker can exploit this vulnerability by sending a specially...

Teluu PJSIP Null/Uninitialized Pointer Vulnerability

Teluu PJSIP is an open source, free multimedia communication library written in C. pjmedia SDP is one of the SDP parsers. A security vulnerability exists in pjmedia SDP parsing in Teluu PJSIP 2.7.1 and earlier versions. An attacker can exploit this vulnerability to cause a denial of service crash...

PT-2018-9278

Name of the Vulnerable Software and Affected Versions: Teluu PJSIP versions 2.7.1 and earlier Description: The issue is related to a null or uninitialized pointer access in the pjmedia SDP parsing component, which can cause a crash. This can be exploited by sending a specially crafted message...

CVE-2017-16875

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow,...

CVE-2017-16875

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow,...

Integer overflow

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow,...

UBUNTU-CVE-2017-16875

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow,...

CVE-2017-16875

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow,...

CVE-2017-16875

CVE-2017-16875 affects Teluu pjproject (PJLIB/PJLIB-UTIL) in PJSIP prior to 2.7.1. The ioqueue component may perform a double key unregistration after a crafted socket sequence, triggering an integer overflow that can cause ioqueue backends to reject future key registrations. Affected software is...

CVE-2017-16875

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow,...

CVE-2017-16875

Removed by vendor...

CVE-2017-16872

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message like cseq, ttl, port, etc. all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted bac...

CVE-2017-16872

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message like cseq, ttl, port, etc. all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted bac...

CVE-2017-16872

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message like cseq, ttl, port, etc. all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted bac...

UBUNTU-CVE-2017-16872

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message like cseq, ttl, port, etc. all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted bac...

Buffer overflow

An issue was discovered in Teluu pjproject pjlib and pjlib-util in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message like cseq, ttl, port, etc. all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted bac...