← Zuruck zu CVEs

CVE-2022-24786

CRITICAL

9.8

Beschreibung

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses pjmedia_rtcp_fb_parse_rpsi() will be affected. A patch is available in the `master` branch of the `pjsip/pjproject` GitHub repository. There are currently no known workarounds.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht4/6/2022

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

debian:debian_linuxpjsip:pjsip

Schwachen (CWE)

CWE-125CWE-787CWE-125CWE-787

Referenzen

https://github.com/pjsip/pjproject/commit/11559e49e65bdf00922ad5ae28913ec6a198d508(security-advisories@github.com)

https://github.com/pjsip/pjproject/security/advisories/GHSA-vhxv-phmx-g52q(security-advisories@github.com)

https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html(security-advisories@github.com)

https://security.gentoo.org/glsa/202210-37(security-advisories@github.com)

https://www.debian.org/security/2022/dsa-5285(security-advisories@github.com)

https://github.com/pjsip/pjproject/commit/11559e49e65bdf00922ad5ae28913ec6a198d508(af854a3a-2127-422b-91ae-364da2661108)

https://github.com/pjsip/pjproject/security/advisories/GHSA-vhxv-phmx-g52q(af854a3a-2127-422b-91ae-364da2661108)

https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html(af854a3a-2127-422b-91ae-364da2661108)

https://security.gentoo.org/glsa/202210-37(af854a3a-2127-422b-91ae-364da2661108)

https://www.debian.org/security/2022/dsa-5285(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.