Vulnerabilities > CVE-2017-16875 - Unspecified vulnerability in Teluu Pjsip

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
HIGH
network
low complexity
teluu
nessus
NVD
Published: 2017-11-17
Updated: 2021-09-02

Summary

An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.

Vulnerable Configurations

Part Description Count
Application
Teluu
61

Nessus

NASL familyDebian Local Security Checks
NASL idDEBIAN_DSA-4170.NASL
descriptionMultiple vulnerabilities have been discovered in the PJSIP/PJProject multimedia communication which may result in denial of service during the processing of SIP and SDP messages and ioqueue keys.
last seen2020-06-01
modified2020-06-02
plugin id108906
published2018-04-10
reporterThis script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.
sourcehttps://www.tenable.com/plugins/nessus/108906
titleDebian DSA-4170-1 : pjproject - security update

References