Debian/ring: critical 9.1
PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size
Action: Upgrade ring to 20230206.0~ds1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 20230206.0~ds1-1 | - |
Fixed versions
| 20230206.0~ds1-1 |
Sources
- osv: DEBIAN-CVE-2021-43845#Debian:12/ring
- https://security-tracker.debian.org/tracker/CVE-2021-43845
published · modified · JSON