PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs when reading WAV file data chunks with length greater than 31-bit integers. The vulnerability does not affect 64-bit apps and should not affect apps that only plays trusted WAV files. A patch is available on the master
branch of the pjsip/project
GitHub repository. As a workaround, apps can reject a WAV file received from an unknown source or validate the file first.
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-config", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-dev", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-mobile", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-modules", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-mp3", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-mysql", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-tests", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-vpb", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-config", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-dev", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-mobile", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-modules", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-mp3", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-mysql", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-tests", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-config", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-dev", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-mobile", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-modules", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-mp3", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-mysql", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-tests", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" }, { "binary_name": "asterisk-config", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" }, { "binary_name": "asterisk-dev", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" }, { "binary_name": "asterisk-mobile", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" }, { "binary_name": "asterisk-modules", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" }, { "binary_name": "asterisk-mp3", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" }, { "binary_name": "asterisk-mysql", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" }, { "binary_name": "asterisk-tests", "binary_version": "1:22.5.2~dfsg+~cs6.15.60671435-1" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-config", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dev", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mobile", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-modules", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mp3", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mysql", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-vpb", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" } ] }
{ "binaries": [ { "binary_name": "libpj2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjlib-util2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-audiodev2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-codec2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-videodev2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjnath2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjproject-dev", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip-simple2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip-ua2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsua2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-config", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dev", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mobile", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-modules", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mp3", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mysql", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-tests", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-vpb", "binary_version": "1:13.18.3~dfsg-1ubuntu4" } ] }
{ "binaries": [ { "binary_name": "libpj2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjlib-util2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjmedia-audiodev2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjmedia-codec2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjmedia-videodev2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjmedia2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjnath2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjproject-dev", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsip-simple2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsip-ua2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsip2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsua2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsua2-2v5", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "python-pjproject", "binary_version": "2.7.2~dfsg-1" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-config", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-dev", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-mobile", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-modules", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-mp3", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-mysql", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-tests", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-vpb", "binary_version": "1:16.2.1~dfsg-2ubuntu1" } ] }
{ "binaries": [ { "binary_name": "jami", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "jami-daemon", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "ring", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "ring-daemon", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" } ] }