The multi-part body parser in PJSIP, as used in Asterisk Open Source 13.x before 13.15.1 and 14.x before 14.4.1, Certified Asterisk 13.13 before 13.13-cert4, and other products, allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libpj2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpj2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjlib-util2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjlib-util2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjmedia-audiodev2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjmedia-audiodev2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjmedia-codec2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjmedia-codec2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjmedia-videodev2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjmedia-videodev2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjmedia2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjmedia2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjnath2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjnath2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjproject-dev", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjsip-simple2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjsip-simple2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjsip-ua2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjsip-ua2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjsip2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjsip2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjsua2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" }, { "binary_name": "libpjsua2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.14.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "binary_name": "libpj2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpj2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjlib-util2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjlib-util2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-audiodev2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-audiodev2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-codec2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-codec2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-videodev2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-videodev2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjnath2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjnath2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjproject-dev", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip-simple2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip-simple2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip-ua2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip-ua2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsua2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsua2-dbgsym", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" } ] }