Multiple vulnerabilities in PJSIP library | allinfosecnews.com

May 3, 2022, 7 a.m. |

FortiGuard Labs | FortiGuard Center - IR Advisories fortiguard.fortinet.com

Some advisories were released affecting the version of PJSIP library used in some Fortinet products:
CVE-2021-43845:
PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message
contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access.
This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size. …

library pjsip vulnerabilities

More from fortiguard.fortinet.com / FortiGuard Labs | FortiGuard Center - IR Advisories

FortiAuthenticator - Open Redirect on /portal/disclaimer 5 days, 1 hour ago | fortiguard.fortinet.com

attacker cwe disclaimer may +8

Exposure of password hashes to read-only admin 5 days, 1 hour ago | fortiguard.fortinet.com

admin control cwe data +11

Double free with double usage of json_object_put 5 days, 1 hour ago | fortiguard.fortinet.com

attacker code commands cwe +9

Format String Bug in cli command 5 days, 1 hour ago | fortiguard.fortinet.com

amp arbitrary code arbitrary code execution attacker +19

Client IP relies on X-Forwarded-For and other headers 5 days, 1 hour ago | fortiguard.fortinet.com

attack bypass client cwe +10

Buffer overflow in administrative interface 5 days, 1 hour ago | fortiguard.fortinet.com

arbitrary code attacker buffer buffer overflow +13

Code injection in playbook code snippet step 5 days, 1 hour ago | fortiguard.fortinet.com

arbitrary code attacker code code injection +7

Client-side enforcement of server-side security related to customer reports features 5 days, 1 hour ago | fortiguard.fortinet.com

access account attacker client +16

HTTP/2 CONTINUATION Frames Vulnerability 5 days, 1 hour ago | fortiguard.fortinet.com

attack can connection crash +14

Information Security Engineers

@ D. E. Shaw Research | New York City

View on infosec-jobs.com

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

View on infosec-jobs.com

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

View on infosec-jobs.com

Senior - Penetration Tester

@ Deloitte | Madrid, España

View on infosec-jobs.com

Associate Cyber Incident Responder

@ Highmark Health | PA, Working at Home - Pennsylvania

View on infosec-jobs.com

Senior Insider Threat Analyst

@ IT Concepts Inc. | Woodlawn, Maryland, United States

View on infosec-jobs.com