CVE-2022-21723

Name of the Vulnerable Software and Affected Versions PJSIP versions 2.11.1 and prior

Description The issue is related to a potential out-of-bound read access when parsing an incoming SIP message that contains a malformed multipart. This affects all PJSIP users that accept SIP multipart. The problem can be exploited by a remote attacker to cause a denial of service.

Recommendations For PJSIP versions 2.11.1 and prior, update to a version that includes the patch available in the master branch, as there are no known workarounds for this issue. As a temporary workaround, consider restricting the acceptance of SIP multipart messages until the patch is applied.