CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
60.3%
PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API pjmedia_sdp_print(), pjmedia_sdp_media_print()
. Applications that do not use PJSUA2 and do not directly call pjmedia_sdp_print()
or pjmedia_sdp_media_print()
should not be affected. A patch is available on the master
branch of the pjsip/pjproject
GitHub repository. There are currently no known workarounds.
Vendor | Product | Version | CPE |
---|---|---|---|
teluu | pjsip | * | cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:* |
debian | debian_linux | 9.0 | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* |
debian | debian_linux | 10.0 | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* |
[
{
"vendor": "pjsip",
"product": "pjproject",
"versions": [
{
"version": "<= 2.12",
"status": "affected"
}
]
}
]
github.com/pjsip/pjproject/commit/560a1346f87aabe126509bb24930106dea292b00
github.com/pjsip/pjproject/security/advisories/GHSA-f5qg-pqcg-765m
lists.debian.org/debian-lts-announce/2022/03/msg00035.html
lists.debian.org/debian-lts-announce/2022/11/msg00021.html
lists.debian.org/debian-lts-announce/2023/08/msg00038.html
security.gentoo.org/glsa/202210-37
www.debian.org/security/2022/dsa-5285
More
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
AI Score
Confidence
High
EPSS
Percentile
60.3%