PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as a commit in the master branch (2.13.1).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade asteriskUpgrade pjproject | Mar 26, 2024 | Dec 20, 2022 |
| Debian | — | Upgrade asteriskUpgrade ring | Feb 24, 2023 | Dec 20, 2022 |
| Ubuntu | — | Upgrade jamiUpgrade jami-daemonUpgrade ring (Ubuntu Pro)Upgrade ring-daemon (Ubuntu Pro)Upgrade ringUpgrade ring-daemon | Oct 10, 2023 | Dec 20, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub