by Kastro
Paper/Archive/CVE-2022-21722

CVE-2022-21722

pjsip pjproject — Potential out-of-bound read during RTP/RTCP parsing in PJSIP

EPSS 2%CVSS 9.1
critical.is priorityof 100
44
CVSS 9.1 (NVD, CNA agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 83.6.836 × 2016.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version 2.11.1 and prior, there are various cases where it is possible that certain incoming RTP/RTCP packets can potentially cause out-of-bound read access. This issue affects all users that use PJMEDIA and accept incoming RTP/RTCP. A patch is available as a commit in the `master` branch. There are no known workarounds.

Affected

ProductAffectedFixed inSource
pjproject<= 2.11.1–CNA

Scores by source

GitHub_M (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refgithub.com/pjsip/pjproject/security/advisories/GHSA-m66q-q64c-hv36refgithub.com/pjsip/pjproject/commit/22af44e68a0c7d190ac1e25075e1382f77e9397areflists.debian.org/debian-lts-announce/2022/03/msg00035.htmladvisorysecurity.gentoo.org/glsa/202210-37reflists.debian.org/debian-lts-announce/2022/11/msg00021.htmladvisorydebian.org/security/2022/dsa-5285reflists.debian.org/debian-lts-announce/2023/08/msg00038.htmlreflists.debian.org/debian-lts-announce/2024/09/msg00030.html