Use-after-free in pjsip - CVE-2022-23608

Vulnerability identifier: #VU60862

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-23608

CWE-ID: CWE-416

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error in dialog set. A remote attacker can send a specially crafted request to cause a dialog set to be registered in the hash table multiple times and results in an endless loop condition.

pjsip
Debian Linux
Gentoo Linux
Ubuntu
Asterisk Open Source
Certified Asterisk
ring (Ubuntu package)
ring-daemon (Ubuntu package)
net-libs/pjproject
asterisk (Debian package)
jami (Ubuntu package)
jami-daemon (Ubuntu package)

Install updates from vendor's website.

pjsip - update to 2.12
Asterisk Open Source - addressed in versions 16.24.1, 18.10.1, 19.2.1
Certified Asterisk - update to 16.8-cert13
ring (Ubuntu package) - addressed in versions Ubuntu Pro, 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1
ring-daemon (Ubuntu package) - addressed in versions Ubuntu Pro, 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1
net-libs/pjproject - update to 2.12.1
asterisk (Debian package) - update to 1:16.28.0~dfsg-0+deb11u1
jami (Ubuntu package) - addressed in versions 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1, 20230206.0~ds1-5ubuntu0.1, 20230206.0~ds2-1.3ubuntu0.1
jami-daemon (Ubuntu package) - addressed in versions 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1, 20230206.0~ds1-5ubuntu0.1, 20230206.0~ds2-1.3ubuntu0.1

• https://github.com/pjsip/pjproject/security/advisories/GHSA-ffff-m5fm-qm62
• https://github.com/pjsip/pjproject/commit/db3235953baa56d2fb0e276ca510fefca751643f

• Multiple vulnerabilities in PJSIP
• Asterisk update for pjsip
• Debian update for asterisk
• Gentoo update for PJSIP
• Ubuntu update for ring
• Ubuntu update for ring