Debian/asterisk: critical 9.1
PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size
Action: Upgrade asterisk to 1:18.12.0~dfsg+~cs6.12.40431413-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:18.12.0~dfsg+~cs6.12.40431413-1 | - |
Fixed versions
| 1:18.12.0~dfsg+~cs6.12.40431413-1 |
Sources
published · modified · JSON