Lucene search
Veracode Vulnerability DatabaseVERACODE:34628HistoryMar 12, 2022 - 10:47 a.m.
Out-of-Bounds Read
2022-03-1210:47:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
pjproject
out-of-bounds read
vulnerability
rtcp_xr.c
validation
rtcp xr
packet size
attacker
EPSS
0.003
Percentile
67.8%
pjproject is vulnerable to out of bounds read. The vulnerability exists in pjmedia_rtcp_xr_rx_rtcp_xr of rtcp_xr.c due to a lack of validation of received packet size which allows an attacker to send a RTCP XR message with an invalid packet size.
References
github.com/pjsip/pjproject/commit/f74c1fc22b760d2a24369aa72c74c4a9ab985859
github.com/pjsip/pjproject/pull/2924
github.com/pjsip/pjproject/security/advisories/GHSA-r374-qrwv-86hh
lists.debian.org/debian-lts-announce/2022/03/msg00035.html
lists.debian.org/debian-lts-announce/2022/11/msg00021.html
secdb.alpinelinux.org/edge/main.yaml
security.gentoo.org/glsa/202210-37
www.debian.org/security/2022/dsa-5285
Related
prion
prion
Design/Logic Flaw
2021-12-27 18:15:00
osv
osv
CVE-2021-43845
2021-12-27 18:15:07
pjproject - security update
2022-03-28 00:00:00
ring - security update
2023-08-29 00:00:00
cvelist
cvelist
CVE-2021-43845 Prevent out-of-bounds read in PJSIP
2021-12-27 00:00:00
alpinelinux
alpinelinux
CVE-2021-43845
2021-12-27 18:15:07
ubuntucve
ubuntucve
CVE-2021-43845
2021-12-27 00:00:00
debiancve
debiancve
CVE-2021-43845
2021-12-27 18:15:07
cve
cve
CVE-2021-43845
2021-12-27 18:15:07
nvd
nvd
CVE-2021-43845
2021-12-27 18:15:07
fortinet
fortinet
Multiple vulnerabilities in PJSIP library
2022-05-03 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2962-1)
2022-03-29 00:00:00
Debian: Security Advisory (DSA-5285-1)
2022-11-19 00:00:00
Ubuntu: Security Advisory (USN-6422-1)
2023-10-10 00:00:00
nessus
nessus
Debian DLA-2962-1 : pjproject - LTS security update
2022-03-30 00:00:00
GLSA-202210-37 : PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00
Ubuntu 18.04 ESM / 20.04 LTS / 23.04 : Ring vulnerabilities (USN-6422-1)
2023-10-09 00:00:00
debian
debian
[SECURITY] [DLA 2962-1] pjproject security update
2022-03-28 14:23:21
[SECURITY] [DSA 5285-1] asterisk security update
2022-11-17 21:42:58
[SECURITY] [DLA 3194-1] asterisk security update
2022-11-17 11:35:25
gentoo
gentoo
PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00
ubuntu
ubuntu
Ring vulnerabilities
2023-10-09 00:00:00
Ring vulnerabilities
2023-10-24 00:00:00