CVE-2021-43845highCWE-125

CVE-2021-43845: falha de alta gravidade em pjsip pjproject

Prevent out-of-bounds read in PJSIP

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar pjproject+ Monitorar asterisk

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.2epss 3.9%
PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
Produtos afetados
pjsip · pjproject
CVEs relacionadas — pjsip pjproject

No mesmo produto, das mais perigosas para as menos.

CVE-2021-37706HIGHPotential integer underflow upon receiving STUN message in PJSIPEPSS 4.9%CVE-2022-21723CRITICALOut-of-bounds read in multipart parsing in PJSIPEPSS 4.4%CVE-2022-23608HIGHUse after free in PJSIPEPSS 4.0%CVE-2022-24764HIGHStack buffer overflow in pjprojectEPSS 2.4%CVE-2022-21722CRITICALPotential out-of-bound read during RTP/RTCP parsing in PJSIPEPSS 2.3%CVE-2023-27585HIGHCVE-2023-27585EPSS 2.3%