PT-2022-2678 · Pjsip+4 · Pjsip+4

Cossack9989 · Published 2022-03-08 · Updated 2024-11-25 · CVE-2022-24754

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PJSIP versions prior to and including 2.12

Description The issue is a stack-buffer overflow vulnerability in the PJSIP library, which only impacts users who accept hashed digest credentials with data type PJSIP CRED DATA DIGEST. This vulnerability can be exploited by a remote attacker to cause a denial of service or execute arbitrary code. The vulnerability is related to the pjsip auth create digest() function and can lead to memory damage.

Recommendations For versions prior to and including 2.12, users should check that the hashed digest data length is equal to PJSIP MD5STRLEN before passing it to PJSIP. As a temporary workaround, consider adding a length check for the hashed digest data to prevent the stack-buffer overflow. Users should upgrade to a newer version once it is available, as the issue has been patched in the master branch of the PJSIP repository.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-1284

CWE-119

CWE-120

Related Identifiers

ALT-PU-2024-15954

ALT-PU-2024-16030

BDU:2022-03168

CVE-2022-24754

DLA-2962-1

DLA-3549-1

DLA-3887-1

GHSA-73F7-48M9-W662

USN-6422-1

Affected Products

Alt Linux

Linuxmint

Pjsip

Red Os

Ubuntu

References · 47

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/24xxx/CVE-2022-24754.json · Exploit
• https://github.com/pjsip/pjproject/commit/d27f79da11df7bc8bb56c2f291d71e54df8d2c47 · Patch
• https://github.com/pjsip/pjproject/security/advisories/GHSA-73f7-48m9-w662 · Patch
• https://security-tracker.debian.org/tracker/CVE-2022-24754 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6422-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-24754 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-24754 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-2962-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-39244 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03168 · Security Note
• https://osv.dev/vulnerability/CVE-2022-24754 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21723 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/676603 · Security Note
• https://ubuntu.com/security/CVE-2022-23547 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21722 · Vendor Advisory