PT-2022-1914
CVE-2021-43303
·
تاريخ النشر
2022-02-16
·
تاريخ التحديث
2026-10-31
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
PJSIP (affected versions not specified)
Description
The issue is related to a buffer overflow in the PJSUA API when calling the
pjsua call dump function. An attacker-controlled buffer argument may cause a buffer overflow if an output buffer smaller than 128 characters is supplied, regardless of the maxlen argument. This could allow a remote attacker to execute arbitrary code. The vulnerability is associated with a boundary error in the PJSUA API, potentially leading to memory corruption.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾