Search CVE reports


Toggle filters

11 – 20 of 38 results


CVE-2022-39244

Medium priority

Some fixes available 2 of 12

PJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJSIP parser, PJMEDIA RTP decoder, and PJMEDIA SDP parser are affeced by a buffer overflow vulnerability. Users...

3 affected packages

asterisk, pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
asterisk Needs evaluation Needs evaluation Ignored Ignored
pjproject Not in release Not in release Vulnerable
ring Not in release Not in release Fixed Fixed
Show less packages

CVE-2022-31031

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer...

2 affected packages

pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Not in release Not in release Not in release Vulnerable
ring Not in release Fixed Fixed
Show less packages

CVE-2022-24792

Medium priority
Vulnerable

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The...

3 affected packages

asterisk, pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
asterisk Needs evaluation Needs evaluation Ignored Ignored
pjproject Vulnerable
ring Not in release Ignored Ignored
Show less packages

CVE-2022-24793

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications that use PJSIP DNS resolution. It doesn't affect PJSIP users who...

3 affected packages

pjproject, ring, sflphone

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Vulnerable
ring Not in release Fixed Fixed
sflphone
Show less packages

CVE-2022-24786

Medium priority
Vulnerable

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses...

3 affected packages

pjproject, ring, sflphone

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Vulnerable
ring Not in release Ignored Ignored
sflphone
Show less packages

CVE-2022-24763

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps....

2 affected packages

pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Vulnerable
ring Not in release Fixed Fixed
Show less packages

CVE-2022-24764

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API...

2 affected packages

pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Vulnerable
ring Not in release Fixed Fixed
Show less packages

CVE-2022-24754

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed...

2 affected packages

pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Vulnerable
ring Not in release Fixed Fixed
Show less packages

CVE-2022-23608

Low priority

Some fixes available 2 of 14

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set...

3 affected packages

asterisk, pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
asterisk Needs evaluation Needs evaluation Ignored Ignored
pjproject Vulnerable
ring Not in release Fixed Fixed
Show less packages

CVE-2021-43303

Medium priority

Some fixes available 4 of 14

Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128 characters may overflow the output buffer,...

3 affected packages

asterisk, pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
asterisk Needs evaluation Needs evaluation Ignored Ignored
pjproject Fixed
ring Not in release Fixed Fixed
Show less packages