Published: 06/04/2022 Updated: 02/02/2023

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses pjmedia_rtcp_fb_parse_rpsi() will be affected. A patch is available in the `master` branch of the `pjsip/pjproject` GitHub repository. There are currently no known workarounds.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pjsip pjsip
debian debian linux 9.0
debian debian linux 10.0

Debian Bug report logs - #1014976 asterisk: CVE-2022-24764 CVE-2022-24763 CVE-2022-24786 CVE-2022-24792 CVE-2022-24793 Package: src:asterisk; Maintainer for src:asterisk is Debian VoIP Team <pkg-voip-maintainers@listsaliothdebianorg>; Reported by: Moritz Mühlenhoff <jmm@inutilorg> Date: Fri, 15 Jul 2022 15:27:01 ...

Multiple security vulnerabilities have been found in Asterisk, an Open Source Private Branch Exchange Buffer overflows and other programming errors could be exploited for information disclosure or the execution of arbitrary code Special care should be taken when upgrading to this new upstream release Some configuration files and options have cha ...

MegaVul - The largest, high-quality, extensible, continuously updated, C/C++ vulnerability dataset

MegaVul 📦 The largest, high-quality, extensible, continuously updated, C/C++ function-level vulnerability dataset With over 17,000 identified vulnerable functions and 320,000 non-vulnerable functions extracted from 9,000 vulnerability fix commits, MegaVul provides multi-dimensional data to help you train state-of-the-art sequence-based or graph-based vulnerability detecto

MegaVul - The largest, high-quality, extensible, continuously updated, C/C++ vulnerability dataset

MegaVul 📦 The largest, high-quality, extensible, continuously updated, C/C++ function-level vulnerability dataset With over 17,000 identified vulnerable functions and 320,000 non-vulnerable functions extracted from 9,000 vulnerability fix commits, MegaVul provides multi-dimensional data to help you train state-of-the-art sequence-based or graph-based vulnerability detecto

CWE-125 CWE-787 https://github.com/pjsip/pjproject/security/advisories/GHSA-vhxv-phmx-g52q https://github.com/pjsip/pjproject/commit/11559e49e65bdf00922ad5ae28913ec6a198d508 https://security.gentoo.org/glsa/202210-37 https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html https://www.debian.org/security/2022/dsa-5285 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1014976 https://nvd.nist.gov https://github.com/Icyrockton/Vul4C https://www.debian.org/security/2022/dsa-5285

CVE-2022-24786

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect