Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-43300
HistoryFeb 16, 2022 - 12:00 a.m.

CVE-2021-43300

2022-02-1600:00:00
ubuntu.com
ubuntu.com
46
buffer overflow
pjsua api
stack overflow
attacker-controlled
filename argument
unix

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.007

Percentile

81.0%

Stack overflow in PJSUA API when calling pjsua_recorder_create. An
attacker-controlled ‘filename’ argument may cause a buffer overflow since
it is copied to a fixed-size stack buffer without any size validation.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchasterisk< anyUNKNOWN
ubuntu20.04noarchasterisk< anyUNKNOWN
ubuntu22.04noarchasterisk< anyUNKNOWN
ubuntu24.04noarchasterisk< anyUNKNOWN
ubuntu16.04noarchasterisk< anyUNKNOWN
ubuntu18.04noarchpjproject< anyUNKNOWN
ubuntu16.04noarchpjproject< anyUNKNOWN
ubuntu18.04noarchring< 20180228.1.503da2b~ds1-1ubuntu0.1~esm1UNKNOWN
ubuntu20.04noarchring< 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1UNKNOWN

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.007

Percentile

81.0%