Lucene search
GoogleOSV:CVE-2022-24786HistoryApr 06, 2022 - 2:15 p.m.
CVE-2022-24786
2022-04-0614:15:07
Google
osv.dev
10
pjsip
multimedia communication
rtcp feedback
rpsi
security vulnerability
patch
EPSS
0.008
Percentile
81.8%
PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses pjmedia_rtcp_fb_parse_rpsi() will be affected. A patch is available in the master branch of the pjsip/pjproject GitHub repository. There are currently no known workarounds.
Related
cvelist
cvelist
CVE-2022-24786 Potential out-of-bound read/write in PJSIP
2022-04-06 00:00:00
debiancve
debiancve
CVE-2022-24786
2022-04-06 14:15:07
nvd
nvd
CVE-2022-24786
2022-04-06 14:15:07
alpinelinux
alpinelinux
CVE-2022-24786
2022-04-06 14:15:07
prion
prion
Design/Logic Flaw
2022-04-06 14:15:00
veracode
veracode
Out-of-Bounds Read And Write
2022-05-14 19:57:31
ubuntucve
ubuntucve
CVE-2022-24786
2022-04-06 00:00:00
cve
cve
CVE-2022-24786
2022-04-06 14:15:07
redos
redos
ROS-20220518-03
2022-05-18 00:00:00
gentoo
gentoo
PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00
nessus
nessus
GLSA-202210-37 : PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00
Debian DLA-3194-1 : asterisk - LTS security update
2022-11-19 00:00:00
Debian DSA-5285-1 : asterisk - security update
2022-11-18 00:00:00
osv
osv
asterisk - security update
2022-11-17 00:00:00
asterisk - security update
2022-11-17 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3194-1)
2022-11-18 00:00:00
Debian: Security Advisory (DSA-5285-1)
2022-11-19 00:00:00
debian
debian
[SECURITY] [DLA 3194-1] asterisk security update
2022-11-17 11:35:25
[SECURITY] [DSA 5285-1] asterisk security update
2022-11-17 21:42:58