Lucene search
Veracode Vulnerability DatabaseVERACODE:39253HistoryFeb 14, 2023 - 5:57 a.m.
Heap-Based Buffer Overflow
2023-02-1405:57:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
26
heap-based buffer overflow
stun
pjnath
pjsua-lib
EPSS
0.002
Percentile
57.9%
ring:sid is vulnerable to Heap-Based Buffer Overflow. An attacker is able to cause buffer over read by parsing a specially crafted STUN message with unknown attribute via multiple functions. This only affects applications using STUN including PJNATH and PJSUA-LIB.
References
github.com/pjsip/pjproject/commit/bc4812d31a67d5e2f973fbfaf950d6118226cf36
github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w
github.com/pjsip/pjproject/security/advisories/GHSA-cxwq-5g9x-x7fr
lists.debian.org/debian-lts-announce/2023/08/msg00038.html
security-tracker.debian.org/tracker/CVE-2022-23547
Related
cvelist
cvelist
CVE-2022-23547 Heap buffer overflow in pjproject when decoding STUN message
2022-12-23 14:00:22
cve
cve
CVE-2022-23547
2022-12-23 15:15:14
debiancve
debiancve
CVE-2022-23547
2022-12-23 15:15:14
prion
prion
Design/Logic Flaw
2022-12-23 15:15:00
ubuntucve
ubuntucve
CVE-2022-23547
2022-12-23 00:00:00
nvd
nvd
CVE-2022-23547
2022-12-23 15:15:14
redos
redos
ROS-20221227-02
2022-12-27 00:00:00
osv
osv
CVE-2022-23537
2022-12-20 19:15:24
CVE-2022-23547
2022-12-23 15:15:14
asterisk - security update
2023-02-23 00:00:00
nessus
nessus
Debian DLA-3335-1 : asterisk - LTS security update
2023-02-24 00:00:00
Debian DSA-5358-1 : asterisk - security update
2023-02-24 00:00:00
Ubuntu 23.10 : Ring vulnerabilities (USN-6422-2)
2023-10-24 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-3335-1)
2023-02-23 00:00:00
Debian: Security Advisory (DSA-5358-1)
2023-02-24 00:00:00
Ubuntu: Security Advisory (USN-6422-2)
2023-10-25 00:00:00
debian
debian
[SECURITY] [DSA 5358-1] asterisk security update
2023-02-23 09:14:43
[SECURITY] [DLA 3335-1] asterisk security update
2023-02-22 22:36:41
[SECURITY] [DLA 3549-1] ring security update
2023-08-29 21:15:19
ubuntu
ubuntu
Ring vulnerabilities
2023-10-24 00:00:00
Ring vulnerabilities
2023-10-09 00:00:00