cbcvebase.
CVE-2023-27585
published 2023-03-14

CVE-2023-27585: PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications…

PriorityP343high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
2.33%
81.4th percentile
PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn't affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A patch is available as commit `d1c5e4d` in the `master` branch. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead.

Affected

10 ranges
VendorProductVersion rangeFixed in
debianasterisk< asterisk 1:16.28.0~dfsg-0+deb11u1 (bullseye)asterisk 1:16.28.0~dfsg-0+deb11u1 (bullseye)
debianasterisk< asterisk 1:16.28.0~dfsg-0+deb11u3 (bullseye)asterisk 1:16.28.0~dfsg-0+deb11u3 (bullseye)
debiandebian_linux
debiandebian_linux
debiandebian_linux
debianring< asterisk 1:16.28.0~dfsg-0+deb11u1 (bullseye)asterisk 1:16.28.0~dfsg-0+deb11u1 (bullseye)
debianring< asterisk 1:16.28.0~dfsg-0+deb11u3 (bullseye)asterisk 1:16.28.0~dfsg-0+deb11u3 (bullseye)
pjsippjproject<= 2.13
pjsippjsip<= 2.12
teluupjsip< 2.132.13

CVSS provenance

nvdv3.17.5HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
osv9.8CRITICAL
vendor_debian7.5HIGH
vendor_ubuntu7.3HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.