Search CVE reports


Toggle filters

11 – 20 of 41 results


CVE-2022-23547

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. This issue is similar to GHSA-9pfh-r8x4-w26w. Possible buffer...

2 affected packages

pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Not in release Not in release Vulnerable
ring Not in release Fixed Fixed
Show less packages

CVE-2022-23537

Medium priority

Some fixes available 2 of 11

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. Buffer overread is possible when parsing a specially crafted...

4 affected packages

asterisk, pjproject, ring, sip

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
asterisk Needs evaluation Vulnerable Not affected Not affected
pjproject Not in release Not in release Vulnerable
ring Not in release Not in release Fixed Fixed
sip Not in release Not in release Not in release
Show less packages

CVE-2022-39269

Medium priority
Vulnerable

PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP media transport to using basic RTP upon SRTP restart, causing the media...

3 affected packages

asterisk, pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
asterisk Needs evaluation Needs evaluation Ignored Ignored
pjproject Not in release Not in release Vulnerable
ring Not in release Not in release Ignored Ignored
Show less packages

CVE-2022-39244

Medium priority

Some fixes available 2 of 12

PJSIP is a free and open source multimedia communication library written in C. In versions of PJSIP prior to 2.13 the PJSIP parser, PJMEDIA RTP decoder, and PJMEDIA SDP parser are affeced by a buffer overflow vulnerability. Users...

3 affected packages

asterisk, pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
asterisk Needs evaluation Needs evaluation Ignored Ignored
pjproject Not in release Not in release Vulnerable
ring Not in release Not in release Fixed Fixed
Show less packages

CVE-2022-31031

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions prior to and including 2.12.1 a stack buffer...

2 affected packages

pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Not in release Not in release Not in release Vulnerable
ring Not in release Fixed Fixed
Show less packages

CVE-2022-24792

Medium priority
Vulnerable

PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The...

3 affected packages

asterisk, pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
asterisk Needs evaluation Needs evaluation Ignored Ignored
pjproject Vulnerable
ring Not in release Ignored Ignored
Show less packages

CVE-2022-24793

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications that use PJSIP DNS resolution. It doesn't affect PJSIP users who...

3 affected packages

pjproject, ring, sflphone

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Vulnerable
ring Not in release Fixed Fixed
sflphone
Show less packages

CVE-2022-24786

Medium priority
Vulnerable

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses...

3 affected packages

pjproject, ring, sflphone

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Vulnerable
ring Not in release Ignored Ignored
sflphone
Show less packages

CVE-2022-24763

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps....

2 affected packages

pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Vulnerable
ring Not in release Fixed Fixed
Show less packages

CVE-2022-24764

Medium priority

Some fixes available 2 of 5

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API...

2 affected packages

pjproject, ring

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
pjproject Vulnerable
ring Not in release Fixed Fixed
Show less packages