Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

0X34D

#36564of 53,624
7.5Total CVSS
Vulnerabilities · 1
PT-2023-21227
7.5
2023-03-14
Pjsip · Pjsip · CVE-2023-27585
**Name of the Vulnerable Software and Affected Versions** PJSIP versions 2.13 and prior **Description** A buffer overflow issue affects applications using the PJSIP DNS resolver, specifically in the `parse query()` function. This issue does not impact PJSIP users who do not use the PJSIP DNS resolver. **Recommendations** For PJSIP versions 2.13 and prior, apply the patch available as commit `d1c5e4d` in the `master` branch. As a temporary workaround, consider disabling DNS resolution in PJSIP config by setting `nameserver count` to zero. Alternatively, use an external resolver implementation instead of the PJSIP DNS resolver to minimize the risk of exploitation.