PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs when reading WAV file data chunks with length greater than 31-bit integers. The vulnerability does not affect 64-bit apps and should not affect apps that only plays trusted WAV files. A patch is available on the master branch of the pjsip/project GitHub repository. As a workaround, apps can reject a WAV file received from an unknown source or validate the file first.
{
"binaries": [
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpj2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjlib-util2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjmedia-audiodev2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjmedia-codec2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjmedia-videodev2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjmedia2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjnath2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjproject-dev"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjsip-simple2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjsip-ua2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjsip2"
},
{
"binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1",
"binary_name": "libpjsua2"
}
]
}{
"binaries": [
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-config"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-dahdi"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-dev"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-mobile"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-modules"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-mp3"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-mysql"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-ooh323"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-tests"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-voicemail"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-voicemail-imapstorage"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-voicemail-odbcstorage"
},
{
"binary_version": "1:13.18.3~dfsg-1ubuntu4",
"binary_name": "asterisk-vpb"
}
]
}{
"binaries": [
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpj2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjlib-util2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjmedia-audiodev2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjmedia-codec2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjmedia-videodev2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjmedia2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjnath2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjproject-dev"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjsip-simple2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjsip-ua2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjsip2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjsua2"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "libpjsua2-2v5"
},
{
"binary_version": "2.7.2~dfsg-1",
"binary_name": "python-pjproject"
}
]
}{
"binaries": [
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-config"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-dahdi"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-dev"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-mobile"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-modules"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-mp3"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-mysql"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-ooh323"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-tests"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-voicemail"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-voicemail-imapstorage"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-voicemail-odbcstorage"
},
{
"binary_version": "1:16.2.1~dfsg-2ubuntu1",
"binary_name": "asterisk-vpb"
}
]
}{
"binaries": [
{
"binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1",
"binary_name": "jami"
},
{
"binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1",
"binary_name": "jami-daemon"
},
{
"binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1",
"binary_name": "ring"
},
{
"binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1",
"binary_name": "ring-daemon"
}
]
}{
"binaries": [
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-config"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-dahdi"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-dev"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-mobile"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-modules"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-mp3"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-mysql"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-ooh323"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-tests"
},
{
"binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2",
"binary_name": "asterisk-vpb"
}
]
}{
"binaries": [
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk"
},
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk-config"
},
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk-dahdi"
},
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk-dev"
},
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk-mobile"
},
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk-modules"
},
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk-mp3"
},
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk-mysql"
},
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk-ooh323"
},
{
"binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5",
"binary_name": "asterisk-tests"
}
]
}{
"binaries": [
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk"
},
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk-config"
},
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk-dahdi"
},
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk-dev"
},
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk-mobile"
},
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk-modules"
},
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk-mp3"
},
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk-mysql"
},
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk-ooh323"
},
{
"binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2",
"binary_name": "asterisk-tests"
}
]
}{
"binaries": [
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk"
},
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk-config"
},
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk-dahdi"
},
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk-dev"
},
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk-mobile"
},
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk-modules"
},
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk-mp3"
},
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk-mysql"
},
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk-ooh323"
},
{
"binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1",
"binary_name": "asterisk-tests"
}
]
}{
"binaries": [
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-config"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-dahdi"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-dev"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-mobile"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-modules"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-mp3"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-mysql"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-ooh323"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-voicemail"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-voicemail-imapstorage"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-voicemail-odbcstorage"
},
{
"binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1",
"binary_name": "asterisk-vpb"
}
]
}