Pjsip · Pjsip · CVE-2022-23608
**Name of the Vulnerable Software and Affected Versions**
PJSIP versions up to and including 2.11.1
**Description**
The issue is related to the use of memory after it has been freed, potentially causing undefined behavior such as dialog list collision, which can lead to an endless loop. This occurs in a dialog set (or forking) scenario when a hash key shared by multiple UAC dialogs is prematurely freed when one of the dialogs is destroyed.
**Recommendations**
For PJSIP versions up to and including 2.11.1, apply the patch available in commit db3235953baa56d2fb0e276ca510fefca751643f to resolve the issue.
As a temporary workaround, consider disabling the dialog set (or forking) functionality until the patch is applied.
Restrict access to the hash table to minimize the risk of exploitation until the issue is resolved.
At the moment, there are no other known workarounds for this issue.