Sauwming

توجد ثغرة قراءة خارج حدود الذاكرة (heap out-of-bounds read) في أداة فك حزم VP9 RTP عند تحليل بيانات «هيكل قابلية التوسع» (SS) لـ VP9 المصممة خصيصًا. يحدث هذا بسبب عدم كفاية فحص حدود طول واصف الحمولة، مما قد يؤدي إلى قراءة بيانات تتجاوز حدود مخزن RTP المخصص للحمولة.

PJSIP هي مكتبة اتصالات وسائط متعددة مجانية ومفتوحة المصدر مكتوبة بلغة C. تحتوي الإصدارات 2.16 وما دونها على ثغرة قراءة متتالية خارج نطاق الذاكرة (heap) في الدالة `pjsip multipart parse()`. بعد مطابقة سلسلة الحدود، يتم تقدم المتغير `curptr` إلى ما بعد الفاصل دون التحقق من أنه لم يصل إلى نهاية المخزن المؤقت، مما يسمح بقراءة 1-2 بايت من ذاكرة الهيب المجاورة. جميع التطبيقات التي تعالج رسائل SIP الواردة ذات الأجسام متعددة الأجزاء أو محتوى SDP معرضة للتأثر.

PJSIP هي مكتبة اتصالات وسائط متعددة مجانية ومفتوحة المصدر مكتوبة بلغة C. تحتوي الإصدارات 2.16 وما دونها على ثغرة تجاوز سعة المخزن المؤقت (Heap-based Buffer Overflow) في معالج طول الاسم بمحلل DNS. ويؤثر ذلك على التطبيقات التي تستخدم محلل DNS المدمج في PJSIP، مثل تلك التي تم تكوينها باستخدام `pjsua config.nameserver` أو `UaConfig.nameserver` في PJSUA/PJSUA2. لا يتأثر المستخدمون الذين يعتمدون على محلل نظام التشغيل (مثل `getaddrinfo()`) من خلال عدم تكوين خادم أسماء، أو أولئك الذين يستخدمون محللًا خارجيًا عبر `pjsip resolver set ext resolver()`.

The issue affects applications that have SRTP capability (`PJMEDIA HAS SRTP` is set) and use underlying media transport other than UDP. A higher level transport is not synchronized with its lower level transport, which may introduce a use-after-free issue. The impact of this issue may range from unexpected application termination to control flow hijack/memory corruption.

The issue is related to a possible buffer overread when parsing a certain STUN message. This affects applications that use STUN, including PJNATH and PJSUA-LIB. The problem is similar to another known issue, GHSA-9pfh-r8x4-w26w.

The issue is related to a buffer overflow vulnerability in the PJSIP parser, PJMEDIA RTP decoder, and PJMEDIA SDP parser. This vulnerability can be exploited by a remote attacker to execute arbitrary code when users connect to untrusted clients.

The issue is related to the incorrect switching from SRTP media transport to basic RTP upon SRTP restart when processing certain packets, causing media to be sent insecurely. This impacts all PJSIP users that use SRTP. The vulnerability may allow a remote attacker to gain unauthorized access to protected information.

The issue is related to a stack buffer overflow vulnerability in the PJSIP multimedia communication library, specifically affecting users of PJSUA2 or those who call the API endpoints `pjmedia sdp print()` and `pjmedia sdp media print()`. This vulnerability can be exploited by a remote attacker to execute arbitrary code or cause a denial of service. Applications not using PJSUA2 and not directly calling `pjmedia sdp print()` or `pjmedia sdp media print()` are not affected.

The issue is related to a buffer overflow in memory when handling RTP/RTCP packets, which can be exploited by a remote attacker to cause a denial of service. PJSIP is a free and open source multimedia communication library that implements standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. The problem affects all users that use PJMEDIA and accept incoming RTP/RTCP packets.

The issue is related to synchronization errors when using shared resources in the PJSIP library. When an error or failure occurs in various parts of PJSIP, the function returns without releasing the currently held locks, potentially resulting in a system deadlock and causing a denial of service for users.

The issue is related to the SSL socket in PJSIP, a free and open source multimedia communication library. It involves a race condition between callback and destroy due to the accepted socket having no group lock, and the SSL socket parent/listener may get destroyed during handshake. These issues occur intermittently in heavy load TLS connections and cause a crash, resulting in a denial of service.

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service.