Stack-based buffer overflow in pjsip - CVE-2022-24764

Vulnerability identifier: #VU63096

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-24764

CWE-ID: CWE-121

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in "pjmedia_sdp_print()" and "pjmedia_sdp_media_print()". A remote unauthenticated attacker can trigger stack-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

pjsip
Debian Linux
Gentoo Linux
Ubuntu
ring (Ubuntu package)
ring-daemon (Ubuntu package)
net-libs/pjproject
asterisk (Debian package)
jami (Ubuntu package)
jami-daemon (Ubuntu package)

Install updates from vendor's website.

pjsip - update to 2.12.1
ring (Ubuntu package) - addressed in versions Ubuntu Pro, 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1
ring-daemon (Ubuntu package) - addressed in versions Ubuntu Pro, 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1
net-libs/pjproject - update to 2.12.1
asterisk (Debian package) - update to 1:16.28.0~dfsg-0+deb11u1
jami (Ubuntu package) - addressed in versions 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1, 20230206.0~ds1-5ubuntu0.1, 20230206.0~ds2-1.3ubuntu0.1
jami-daemon (Ubuntu package) - addressed in versions 20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1, 20230206.0~ds1-5ubuntu0.1, 20230206.0~ds2-1.3ubuntu0.1

• https://github.com/pjsip/pjproject/commit/560a1346f87aabe126509bb24930106dea292b00
• https://github.com/pjsip/pjproject/security/advisories/GHSA-f5qg-pqcg-765m
• https://lists.debian.org/debian-lts-announce/2022/03/msg00035.html

• Remote code execution in pjproject
• Debian update for asterisk
• Gentoo update for PJSIP
• Ubuntu update for ring
• Ubuntu update for ring