CVE-2022-24786

 

Published at: - 06-04-2022 04:15

Last modified: - 18-11-2022 05:15

Total changes: - 6

Description

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses pjmedia_rtcp_fb_parse_rpsi() will be affected. A patch is available in the `master` branch of the `pjsip/pjproject` GitHub repository. There are currently no known workarounds.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://github.com/pjsip/pjproject/security/advisories/GHSA-vhxv-phmx-g52q
• https://github.com/pjsip/pjproject/commit/11559e49e65bdf00922ad5ae28913ec6a198d508
• GLSA-202210-37-Third Party Advisory
• [debian-lts-announce] 20221117 [SECURITY] [DLA 3194-1] asterisk security update-
• DSA-5285-

 

Keywords

NVD

 

CVE-2022-24786

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures