tocsin

Debian/asterisk: critical 9.1

PJSIP is a free and open source multimedia communication library written in C. In 2.16 and earlier, there is an out-of-bounds read when parsing a malformed Content-ID URI in SIP multipart message body

Action: Upgrade asterisk to 1:22.10.0+dfsg+~cs6.17.60671434-1 or later.

Affected

introducedfixedlast affected
01:22.10.0+dfsg+~cs6.17.60671434-1-

Fixed versions

1:22.10.0+dfsg+~cs6.17.60671434-1

Sources

published · modified · JSON