PT-2022-16066 · Pjsip+5 · Pjsip+5

Sauwming · Published 2022-12-23 · Updated 2024-09-14 · CVE-2022-23547

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PJSIP (affected versions not specified)

Description The issue is related to a possible buffer overread when parsing a certain STUN message. This affects applications that use STUN, including PJNATH and PJSUA-LIB. The problem is similar to another known issue, GHSA-9pfh-r8x4-w26w.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Heap Based Buffer Overflow

Weakness Enumeration

CWE-125

CWE-122

Related Identifiers

CVE-2022-23547

DLA-3335-1

DLA-3549-1

DLA-3887-1

DSA-5358-1

GHSA-9PFH-R8X4-W26W

GHSA-CXWQ-5G9X-X7FR

USN-6422-1

Affected Products

Linuxmint

Pjnath

Pjsip

Pjsua-Lib

Red Os

Ubuntu

References · 41

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23547.json · Exploit
• https://github.com/pjsip/pjproject/commit/bc4812d31a67d5e2f973fbfaf950d6118226cf36 · Patch
• https://github.com/pjsip/pjproject/security/advisories/GHSA-9pfh-r8x4-w26w · Patch
• https://github.com/pjsip/pjproject/security/advisories/GHSA-cxwq-5g9x-x7fr · Patch
• https://osv.dev/vulnerability/DLA-3335-1 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6422-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24754 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39244 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23547 · Security Note
• https://ubuntu.com/security/CVE-2022-21723 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23547 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21722 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-31031 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24793 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43299 · Vendor Advisory