Pjsip · Pjsip · CVE-2023-27585
**Name of the Vulnerable Software and Affected Versions**
PJSIP versions 2.13 and prior
**Description**
A buffer overflow issue affects applications using the PJSIP DNS resolver, specifically in the `parse query()` function. This issue does not impact PJSIP users who do not use the PJSIP DNS resolver.
**Recommendations**
For PJSIP versions 2.13 and prior, apply the patch available as commit `d1c5e4d` in the `master` branch.
As a temporary workaround, consider disabling DNS resolution in PJSIP config by setting `nameserver count` to zero.
Alternatively, use an external resolver implementation instead of the PJSIP DNS resolver to minimize the risk of exploitation.