PT-2022-5347

CVE-2022-39244

·

تاريخ النشر

2022-10-06

·

تاريخ التحديث

2026-10-31

الوصف من

CVSS 2.0
10
حرجة
المقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.13
Description The issue is related to a buffer overflow vulnerability in the PJSIP parser, PJMEDIA RTP decoder, and PJMEDIA SDP parser. This vulnerability can be exploited by a remote attacker to execute arbitrary code when users connect to untrusted clients.
Recommendations For versions prior to 2.13, upgrade to version 2.13 or later to resolve the issue. As a temporary workaround, consider restricting connections to trusted clients until the upgrade is applied.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
GHSA-FQ45-M3F7-3MHJ
CLEANSTART-2024-AR47752
DLA-3335-1
DLA-3549-1
DLA-3887-1
DSA-5358-1
USN-6422-1
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾