| Package | Affected versions | Patched versions |
|---|---|---|
| certified asterisk | = 16.8.0 | |
| asterisk | ≥ 16.0.0, < 16.24.1≥ 18.0.0, < 18.10.1≥ 19.0.0, < 19.2.1 | 16.24.118.10.119.2.1 |
| pjsip | ≤ 2.11.1 |
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause out-of-bound read access. This issue affects all PJSIP users that accept SIP multipart. The patch is available as commit in the `master` branch. There are no known workarounds.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free