Описание
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 2.7.2~dfsg-1 |
| cosmic | not-affected | 2.7.2~dfsg-1 |
| devel | DNE | |
| disco | not-affected | 2.7.2~dfsg-1 |
| eoan | not-affected | 2.7.2~dfsg-1 |
| esm-apps-legacy/xenial | released | 2.1.0.0.ast20130823-1+deb8u1ubuntu0.1~esm1 |
| esm-apps/bionic | not-affected | 2.7.2~dfsg-1 |
| esm-apps/xenial | released | 2.1.0.0.ast20130823-1+deb8u1ubuntu0.1~esm1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in P ...
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.
ALT-PU-2018-3676: package `libpjsip` update to version 2.8-alt1
EPSS
5 Medium
CVSS2
7.5 High
CVSS3