Asymmetric denial of service In asterisk
Description
PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update. There are no known workarounds.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
alpine v3.17 | 2.12.1-r0 | ||
alpine v3.16 | 2.12.1-r0 | ||
alpine v3.18 | 2.12.1-r0 | ||
alpine v3.19 | 2.12.1-r0 | ||
alpine v3.20 | 2.12.1-r0 | ||
alpine v3.21 | 2.12.1-r0 | ||
alpine v3.22 | 2.12.1-r0 | ||
debian 12 | 20230206.0~ds1-1 | ||
alpine v3.23 | 2.12.1-r0 | ||
alpine v3.24 | 2.12.1-r0 |
1-10 of 11
10
Aliases
1. 2. 3. 4. 5. 6. 7.