teluu pjsip vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

PJSIP is a free and open source multimedia communication library written in C with high level API in C, C++, Java, C#, and Python languages. SRTP is a higher level media transport which is stacked upon a lower level media transport such as UDP and ICE. Currently a higher level tr...

Teluu Pjsip

9.8

CVSSv3

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted STUN message with unknown attribute. The vulnerabi...

Teluu Pjsip Debian Debian Linux 10.0

9.8

CVSSv3

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer overflow vulnerability affects PJSIP users that use ST...

Teluu Pjsip Debian Debian Linux 10.0 Debian Debian Linux 11.0

9.8

CVSSv3

PJSIP is a free and open source multimedia communication library written in C language. In versions prior to and including 2.12 PJSIP there is a stack-buffer overflow vulnerability which only impacts PJSIP users who accept hashed digest credentials (credentials with data_type `PJ...

Teluu Pjsip Debian Debian Linux 9.0

9.8

CVSSv3

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set (or forking) scenario, a hash key shared by multipl...

Teluu Pjsip Asterisk Certified Asterisk 16.8.0 Asterisk Certified Asterisk Sangoma Asterisk Debian Debian Linux 9.0 Debian Debian Linux 10.0

9.8

CVSSv3

Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.

Teluu Pjsip Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

9.8

CVSSv3

Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.

Teluu Pjsip Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

9.8

CVSSv3

Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled 'file_names' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.

Teluu Pjsip Debian Debian Linux 9.0 Debian Debian Linux 10.0

9.8

CVSSv3

Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128 characters may overflow the output buffer, regardless of the 'maxlen' argument su...

Teluu Pjsip Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0

9.8

CVSSv3

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not ch...

Teluu Pjsip Asterisk Certified Asterisk 16.8.0 Asterisk Certified Asterisk Sangoma Asterisk Debian Debian Linux 9.0 Debian Debian Linux 10.0

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook