PT-2022-5347

CVE-2022-39244

·

Published

2022-10-06

·

Updated

2026-10-31

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions PJSIP versions prior to 2.13
Description The issue is related to a buffer overflow vulnerability in the PJSIP parser, PJMEDIA RTP decoder, and PJMEDIA SDP parser. This vulnerability can be exploited by a remote attacker to execute arbitrary code when users connect to untrusted clients.
Recommendations For versions prior to 2.13, upgrade to version 2.13 or later to resolve the issue. As a temporary workaround, consider restricting connections to trusted clients until the upgrade is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-FQ45-M3F7-3MHJ
CLEANSTART-2024-AR47752
DLA-3335-1
DLA-3549-1
DLA-3887-1
DSA-5358-1
USN-6422-1
Found an issue in the description? Have something to add? Feel free to write us 👾