Alpine/pjproject: critical 9.1
PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size
Action: Upgrade pjproject to 2.12-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.12-r0 | - |
Fixed versions
| 2.12-r0 |
Sources
- osv: ALPINE-CVE-2021-43845#Alpine:v3.20/pjproject
- https://security.alpinelinux.org/vuln/CVE-2021-43845
published · modified · JSON