DEBIAN-CVE-2022-24786

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/CVE-2022-24786
Import Source
https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2022-24786.json
JSON Data
https://api.osv.dev/v1/vulns/DEBIAN-CVE-2022-24786
Upstream
Published
2022-04-06T14:15:07Z
Modified
2025-09-30T05:15:35.782258Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

PJSIP is a free and open source multimedia communication library written in C. PJSIP versions 2.12 and prior do not parse incoming RTCP feedback RPSI (Reference Picture Selection Indication) packet, but any app that directly uses pjmediartcpfbparserpsi() will be affected. A patch is available in the master branch of the pjsip/pjproject GitHub repository. There are currently no known workarounds.

References

Affected packages

Debian:11 / asterisk

Package

Name
asterisk
Purl
pkg:deb/debian/asterisk?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1:16.28.0~dfsg-0+deb11u1

Affected versions

1:16.*

1:16.16.1~dfsg-1
1:16.16.1~dfsg-1+deb11u1~bpo10+1
1:16.16.1~dfsg-1+deb11u1
1:16.16.1~dfsg-2
1:16.16.1~dfsg-3
1:16.16.1~dfsg-4
1:16.16.1~dfsg+~2.10-1
1:16.16.1~dfsg+~2.10-2
1:16.23.0~dfsg+~2.10-1
1:16.23.0~dfsg+~cs6.10.20220309-1
1:16.23.0~dfsg+~cs6.10.20220309-2
1:16.23.0~dfsg+~cs6.10.40431411-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:11 / ring

Package

Name
ring
Purl
pkg:deb/debian/ring?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

20210112.*

20210112.2.b757bac~ds1-1
20210112.2.b757bac~ds1-1+deb11u1
20210112.2.b757bac~ds1-2

20230206.*

20230206.0~ds1-1
20230206.0~ds1-2
20230206.0~ds1-3
20230206.0~ds1-4
20230206.0~ds1-4.1
20230206.0~ds1-4.2
20230206.0~ds1-5
20230206.0~ds1-6
20230206.0~ds2-1
20230206.0~ds2-1.1
20230206.0~ds2-1.2
20230206.0~ds2-1.3

20230922.*

20230922.0~ds1-1
20230922.0~ds2-1

20231201.*

20231201.0~ds1-1

Ecosystem specific 

{
    "urgency": "unimportant"
}

Debian:12 / ring

Package

Name
ring
Purl
pkg:deb/debian/ring?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
20230206.0~ds1-1

Ecosystem specific 

{
    "urgency": "unimportant"
}