VDB

CVE-2022-24763

CVE-2022-24763 PUBLISHED CVSS 7.5 HIGH

PJSIP is a free and open source multimedia communication library written in the C language. Versions 2.12 and prior contain a denial-of-service vulnerability that affects PJSIP users that consume PJSIP's XML parsing in their apps. Users are advised to update. There are no known workarounds.

EPSS 1.40% · 80.7th percentile

Risk Scores

CVSS v3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
1.40%
80.7th percentile

Affected Products

VendorProductVersions
pjsippjsip2.5
debiandebian_linux11.0, 10.0, 9.0
pjsippjproject<= 2.12

Timeline

  • Mar 30, 2022 CVE Published
  • Mar 31, 2022 EPSS Score
  • May 21, 2022 EPSS Score
  • Jul 10, 2022 EPSS Score
  • Oct 20, 2022 EPSS Score
  • Dec 10, 2022 EPSS Score
  • Jan 30, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 21, 2023 EPSS Score
  • May 11, 2023 EPSS Score
  • Aug 20, 2023 EPSS Score
  • Oct 10, 2023 EPSS Score

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›