Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
01
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-43303US | critical9.8 | — | ||
Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled 'buffer' argument may cause a buffer overflow, since supplying an output buffer smaller than 128 c… | ||||
| CVE-2021-43302US | critical9.1 | — | ||
Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled 'filename' argument may cause an out-of-bounds read when the filename is shorter than 4 c… | ||||
| CVE-2021-43301US | critical9.8 | — | ||
Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled 'file_names' argument may cause a buffer overflow since it is copied to a fixed-size stack bu… | ||||
| CVE-2021-43299US | critical9.8 | — | ||
Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled 'filename' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9FIX
- https://lists.debian.org/debian-lts-announce/2022/03/msg00035.htmlADVISORY
- https://lists.debian.org/debian-lts-announce/2022/11/msg00021.htmlADVISORY
- https://lists.debian.org/debian-lts-announce/2023/08/msg00038.htmlWEB
- https://lists.debian.org/debian-lts-announce/2024/09/msg00030.htmlWEB
- https://www.debian.org/security/2022/dsa-5285ADVISORY
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan