CVE-2022-24764

PJSIP is a free and open source multimedia communication library written in C. Versions 2.12 and prior contain a stack buffer overflow vulnerability that affects PJSUA2 users or users that call the API pjmedia_sdp_print(), pjmedia_sdp_media_print(). Applications that do not use PJSUA2 and do not directly call pjmedia_sdp_print() or pjmedia_sdp_media_print() should not be affected. A patch is available on the master branch of the pjsip/pjproject GitHub repository. There are currently no known workarounds.

Database specific

{
    "cwe_ids": [
        "CWE-120",
        "CWE-121"
    ]
}

References

Affected packages

Git / github.com/pjsip/pjproject

Affected ranges

Type: GIT
Repo: https://github.com/pjsip/pjproject
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

560a1346f87aabe126509bb24930106dea292b00

Affected versions

2.*

2.10

2.11

2.12

Database specific

vanir_signatures

[
    {
        "id": "CVE-2022-24764-0d4caacd",
        "signature_version": "v1",
        "digest": {
            "length": 1555.0,
            "function_hash": "208854040160421128083462874726642136992"
        },
        "deprecated": false,
        "source": "https://github.com/pjsip/pjproject/commit/560a1346f87aabe126509bb24930106dea292b00",
        "target": {
            "function": "print_media_desc",
            "file": "pjmedia/src/pjmedia/sdp.c"
        },
        "signature_type": "Function"
    },
    {
        "id": "CVE-2022-24764-6eb5cec9",
        "signature_version": "v1",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "64606461958681302124486533034512187286",
                "171153498388362914232929143315636409437",
                "44614615952275966661384869488049674806",
                "140311919359401355541339152786259427539",
                "84254501011695234206729329924491445531",
                "103631987683654890207061452575892070391",
                "127423530390851093415962959140125219611",
                "64110003409475490530906640567752700472",
                "114618772119433327705211110644570447310"
            ]
        },
        "deprecated": false,
        "source": "https://github.com/pjsip/pjproject/commit/560a1346f87aabe126509bb24930106dea292b00",
        "target": {
            "file": "pjmedia/src/pjmedia/sdp.c"
        },
        "signature_type": "Line"
    }
]