PT-2023-21227 · Pjsip+4 · Pjsip+4

0X34D · Published 2023-03-14 · Updated 2025-11-04 · CVE-2023-27585

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions PJSIP versions 2.13 and prior

Description A buffer overflow issue affects applications using the PJSIP DNS resolver, specifically in the parse query() function. This issue does not impact PJSIP users who do not use the PJSIP DNS resolver.

Recommendations For PJSIP versions 2.13 and prior, apply the patch available as commit d1c5e4d in the master branch. As a temporary workaround, consider disabling DNS resolution in PJSIP config by setting nameserver count to zero. Alternatively, use an external resolver implementation instead of the PJSIP DNS resolver to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Heap Based Buffer Overflow

Weakness Enumeration

CWE-120

CWE-122

Related Identifiers

ALT-PU-2024-15954

ALT-PU-2024-16030

CVE-2023-27585

DLA-3394-1

DLA-3549-1

DLA-3887-1

DSA-5438-1

DSA-5956-1

GHSA-P6G5-V97C-W5Q4

GHSA-Q9CP-8WCQ-7PFR

USN-6422-1

USN-6422-2

Affected Products

Alt Linux

Debian

Linuxmint

Pjsip

Ubuntu

References · 48

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/27xxx/CVE-2023-27585.json · Exploit
• https://github.com/pjsip/pjproject/commit/d1c5e4da5bae7f220bc30719888bb389c905c0c5 · Patch
• https://github.com/pjsip/pjproject/security/advisories/GHSA-p6g5-v97c-w5q4 · Vendor Advisory
• https://github.com/pjsip/pjproject/security/advisories/GHSA-q9cp-8wcq-7pfr · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43301 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3394-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3549-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-23608 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-27585 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-43300 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21722 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-27585 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6422-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-21723 · Vendor Advisory
• https://osv.dev/vulnerability/ALPINE-CVE-2023-27585 · Vendor Advisory