Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43303US | critical9.8 | — | ||
Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128 c… | ||||
| CVE-2021-43302US | critical9.1 | — | ||
Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause an out-of-bounds read when the filename is shorter than 4 c… | ||||
| CVE-2021-43301US | critical9.8 | — | ||
Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled 'file_names' argument may cause a buffer overflow since it is copied to a fixed-size stack bu… | ||||
| CVE-2021-43299US | critical9.8 | — | ||
Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9FIX
- https://lists.debian.org/debian-lts-announce/2022/03/msg00035.htmlADVISORY
- https://lists.debian.org/debian-lts-announce/2022/11/msg00021.htmlADVISORY
- https://lists.debian.org/debian-lts-announce/2023/08/msg00038.htmlWEB
- https://lists.debian.org/debian-lts-announce/2024/09/msg00030.htmlWEB
- https://www.debian.org/security/2022/dsa-5285ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan