by Kastro
Paper/Archive/CVE-2022-21723

CVE-2022-21723

pjsip pjproject — Out-of-bounds read in multipart parsing in PJSIP

EPSS 4%CVSS 9.1
critical.is priorityof 100
46
CVSS 9.1 (NVD, CNA agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 91.2.912 × 2018.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause out-of-bound read access. This issue affects all PJSIP users that accept SIP multipart. The patch is available as commit in the `master` branch. There are no known workarounds.

Affected

ProductAffectedFixed inSource
pjproject<= 2.11.1–CNA

Scores by source

GitHub_M (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refgithub.com/pjsip/pjproject/security/advisories/GHSA-7fw8-54cv-r7pmrefgithub.com/pjsip/pjproject/commit/077b465c33f0aec05a49cd2ca456f9a1b112e896refseclists.org/fulldisclosure/2022/Mar/2refpacketstormsecurity.com/files/166227/Asterisk-Project-Security-Advisory-AST-2022-006.htmlreflists.debian.org/debian-lts-announce/2022/03/msg00035.htmladvisorysecurity.gentoo.org/glsa/202210-37reflists.debian.org/debian-lts-announce/2022/11/msg00021.htmladvisorydebian.org/security/2022/dsa-5285reflists.debian.org/debian-lts-announce/2023/08/msg00038.htmlreflists.debian.org/debian-lts-announce/2024/09/msg00030.html