CVE-2022-24763

Katalog CVE

CVSS 7.5 · High EPSS 2,1%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada teluu pjsip, debian linux. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update. There are no known workarounds.

Rincian

Terbit di NVD

30 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 80,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/pjsip/pjproject/commit/856f87c2e97a27b256482dbe0d748b1194355a21 patch · advisory pihak ketiga
• https://github.com/pjsip/pjproject/security/advisories/GHSA-5x45-qp78-g4p4 patch · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/05/msg00047.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2022/11/msg00021.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/08/msg00038.html mailing list · advisory pihak ketiga
• https://security.gentoo.org/glsa/202210-37 advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5285 advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2024/09/msg00030.html