Skip to content
OpenAdvisories
High DLA-3036-1 3 CVEs

pjproject - security update

Published May 31, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 pjproject 2.5.5~dfsg-6+deb9u5

Vulnerabilities 3

  • High 7.5
    CVE-2022-24763

    Infinite Loop in PJSIP

    PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update.…

    pjsip pjproject asterisk pjproject Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-24792

    Potential infinite loop when parsing WAV format file in PJSIP

    PJSIP is a free and open source multimedia communication library written in C. A denial-of-service vulnerability affects applications on a 32-bit systems that use PJSIP versions 2.12 and prior to play/read invalid WAV files. The vulnerability occurs when read…

    pjsip pjproject asterisk asterisk Debian Ubuntu Alpine
  • High 7.5
    CVE-2022-24793

    Potential heap buffer overflow when parsing DNS packets in PJSIP

    PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.12 and prior affects applications that use PJSIP DNS resolution. It doesn't affect PJSIP users who utilize an external resolver. This …

    pjsip pjproject asterisk pjproject Debian Ubuntu Alpine