Out-of-bounds read In pjproject
Description
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause out-of-bound read access. This issue affects all PJSIP users that accept SIP multipart. The patch is available as commit in the master branch. There are no known workarounds.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 alpine v3.21 | 2.12-r0 | ||
alpine v3.19 | 2.12-r0 | ||
alpine v3.16 | 2.12-r0 | ||
alpine v3.17 | 2.12-r0 | ||
alpine v3.18 | 2.12-r0 | ||
alpine v3.20 | 2.12-r0 | ||
alpine v3.22 | 2.12-r0 | ||
 debian 12 | 20230206.0~ds1-1 | ||
alpine v3.23 | 2.12-r0 | ||
alpine v3.24 | 2.12-r0 |
1-10 of 11
10
Aliases
1. 2. 3. 4. 5. 6. 7.