PJSIP is a free and open source multimedia communication library written in C. When processing certain packets, PJSIP may incorrectly switch from using SRTP media transport to using basic RTP upon SRTP restart, causing the media to be sent insecurely. The vulnerability impacts all PJSIP users that use SRTP. The patch is available as commit d2acb9a in the master branch of the project and will be included in version 2.13. Users are advised to manually patch or to upgrade. There are no known workarounds for this vulnerability.
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-config", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-dev", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mobile", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-modules", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mp3", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-mysql", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" }, { "binary_name": "asterisk-vpb", "binary_version": "1:13.1.0~dfsg-1.1ubuntu4.1+esm1" } ] }
{ "binaries": [ { "binary_name": "libpj2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjlib-util2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-audiodev2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-codec2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia-videodev2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjmedia2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjnath2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjproject-dev", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip-simple2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip-ua2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsip2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" }, { "binary_name": "libpjsua2", "binary_version": "2.1.0.0.ast20130823-1+deb8u1build0.16.04.1" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-config", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-dev", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mobile", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-modules", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mp3", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-mysql", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-tests", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:13.18.3~dfsg-1ubuntu4" }, { "binary_name": "asterisk-vpb", "binary_version": "1:13.18.3~dfsg-1ubuntu4" } ] }
{ "binaries": [ { "binary_name": "libpj2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjlib-util2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjmedia-audiodev2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjmedia-codec2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjmedia-videodev2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjmedia2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjnath2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjproject-dev", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsip-simple2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsip-ua2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsip2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsua2", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "libpjsua2-2v5", "binary_version": "2.7.2~dfsg-1" }, { "binary_name": "python-pjproject", "binary_version": "2.7.2~dfsg-1" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-config", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-dev", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-mobile", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-modules", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-mp3", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-mysql", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-tests", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-voicemail", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-voicemail-imapstorage", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-voicemail-odbcstorage", "binary_version": "1:16.2.1~dfsg-2ubuntu1" }, { "binary_name": "asterisk-vpb", "binary_version": "1:16.2.1~dfsg-2ubuntu1" } ] }
{ "binaries": [ { "binary_name": "jami", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "jami-daemon", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "ring", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" }, { "binary_name": "ring-daemon", "binary_version": "20190215.1.f152c98~ds1-1+deb10u2build0.20.04.1" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-config", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-dev", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-mobile", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-modules", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-mp3", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-mysql", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-tests", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" }, { "binary_name": "asterisk-vpb", "binary_version": "1:18.10.0~dfsg+~cs6.10.40431411-2" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-config", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-dev", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-mobile", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-modules", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-mp3", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-mysql", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" }, { "binary_name": "asterisk-tests", "binary_version": "1:20.6.0~dfsg+~cs6.13.40431414-2build5" } ] }
{ "binaries": [ { "binary_name": "asterisk", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-config", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-dahdi", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-dev", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-mobile", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-modules", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-mp3", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-mysql", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-ooh323", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" }, { "binary_name": "asterisk-tests", "binary_version": "1:22.2.0~dfsg+~cs6.15.60671435-2" } ] }