CVE-2022-21722

Name of the Vulnerable Software and Affected Versions PJSIP versions 2.11.1 and prior

Description The issue is related to a buffer overflow in memory when handling RTP/RTCP packets, which can be exploited by a remote attacker to cause a denial of service. PJSIP is a free and open source multimedia communication library that implements standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. The problem affects all users that use PJMEDIA and accept incoming RTP/RTCP packets.

Recommendations For PJSIP versions 2.11.1 and prior, update to a version that includes the patch available as a commit in the master branch to resolve the issue. As a temporary workaround, consider restricting the acceptance of incoming RTP/RTCP packets until the patch is applied.