Stack overflow in PJSUA API when calling pjsuaplaylistcreate. An attacker-controlled 'file_names' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
{ "binaries": [ { "binary_name": "ring", "binary_version": "20180228.1.503da2b~ds1-1ubuntu0.1~esm1" }, { "binary_name": "ring-daemon", "binary_version": "20180228.1.503da2b~ds1-1ubuntu0.1~esm1" }, { "binary_name": "ring-daemon-dbgsym", "binary_version": "20180228.1.503da2b~ds1-1ubuntu0.1~esm1" }, { "binary_name": "ring-dbgsym", "binary_version": "20180228.1.503da2b~ds1-1ubuntu0.1~esm1" } ], "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro" }
{ "binaries": [ { "binary_name": "jami", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "jami-daemon", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "jami-daemon-dbgsym", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "jami-dbgsym", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "ring", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "ring-daemon", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" } ], "ubuntu_priority": "medium", "availability": "No subscription required" }