PT-2022-2175 · Pjsip+3 · Pjsip+3

Typettetris · Published 2020-07-06 · Updated 2024-11-25 · CVE-2022-23608

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PJSIP versions up to and including 2.11.1

Description The issue is related to the use of memory after it has been freed, potentially causing undefined behavior such as dialog list collision, which can lead to an endless loop. This occurs in a dialog set (or forking) scenario when a hash key shared by multiple UAC dialogs is prematurely freed when one of the dialogs is destroyed.

Recommendations For PJSIP versions up to and including 2.11.1, apply the patch available in commit db3235953baa56d2fb0e276ca510fefca751643f to resolve the issue. As a temporary workaround, consider disabling the dialog set (or forking) functionality until the patch is applied. Restrict access to the hash table to minimize the risk of exploitation until the issue is resolved. At the moment, there are no other known workarounds for this issue.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2020-2313

ALT-PU-2024-15954

ALT-PU-2024-16030

BDU:2022-02186

CVE-2022-23608

DLA-2962-1

DLA-2962-2

DLA-3194-1

DLA-3549-1

DLA-3887-1

DSA-5285-1

GHSA-FFFF-M5FM-QM62

USN-6422-1

Affected Products

Alt Linux

Linuxmint

Pjsip

Ubuntu

References · 55

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23608.json · Exploit
• https://github.com/pjsip/pjproject/commit/db3235953baa56d2fb0e276ca510fefca751643f · Patch
• https://github.com/pjsip/pjproject/security/advisories/GHSA-ffff-m5fm-qm62 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-23608 · Security Note
• https://osv.dev/vulnerability/USN-6422-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24754 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39244 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2962-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21723 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23547 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3194-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21722 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-31031 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24793 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43299 · Vendor Advisory