CVE-2022-24763

High

Description

PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update. There are no known workarounds.

SeverityHigh

CVSS7.5

Exploit probability—

Product

Teluu Pjsip

PublishedMar 30, 2022

First seenMar 30, 2022

Weakness typeCWE-835CWE-835

How to fix

Update

teluu pjsip2.13 or later

Vendor advisories

security.gentoo.org/glsa/202210-37
debian.org/security/2022/dsa-5285

Affected products

Product	Affected versions	Fixed in
teluu pjsip	2.5 ≤ v < 2.13	2.13
debian debian_linux	9.0, 10.0, 11.0	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.