The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer overread when parsing a certain STUN message. The vulnerability affects applications that uses STUN including PJNATH and PJSUA-LIB. The patch is available as commit in the master branch.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade asteriskUpgrade ring | Feb 24, 2023 | Dec 23, 2022 |
| Ubuntu | — | Upgrade ring-daemon (Ubuntu Pro)Upgrade jami-daemonUpgrade jamiUpgrade ring (Ubuntu Pro)Upgrade ring-daemonUpgrade ring | Oct 10, 2023 | Dec 23, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub