https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 18:06:07 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-01086 bdu:2022-01086 https://cve.radiocsirt.org/vuln/bdu:2022-01086 https://cve.radiocsirt.org/vuln/certfr-2022-avi-208 certfr-2022-avi-208 https://cve.radiocsirt.org/vuln/certfr-2022-avi-208 https://cve.radiocsirt.org/vuln/euvd-2026-258776 EUVD-2026-258776 https://cve.radiocsirt.org/vuln/euvd-2026-258776 https://cve.radiocsirt.org/vuln/fkie_cve-2021-37706 <p>PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before performing a subtraction operation, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious actor located within the victim’s network may forge and send a specially crafted UDP (STUN) message that could remotely execute arbitrary code on the victim’s machine. Users are advised to upgrade as soon as possible. There are no known workarounds.</p> <p>PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before performing a subtraction operation, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious actor located within the victim’s network may forge and send a specially crafted UDP (STUN) message that could remotely execute arbitrary code on the victim’s machine. Users are advised to upgrade as soon as possible. There are no known workarounds.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-37706 https://cve.radiocsirt.org/vuln/gsd-2021-37706 gsd-2021-37706 https://cve.radiocsirt.org/vuln/gsd-2021-37706 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37706 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: ring, Ubuntu:20.04:LTS: ring</p> <p>PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before performing a subtraction operation, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious actor located within the victim’s network may forge and send a specially crafted UDP (STUN) message that could remotely execute arbitrary code on the victim’s machine. Users are advised to upgrade as soon as possible. There are no known workarounds.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: ring, Ubuntu:20.04:LTS: ring</p> <p>PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In affected versions if the incoming STUN message contains an ERROR-CODE attribute, the header length is not checked before performing a subtraction operation, potentially resulting in an integer underflow scenario. This issue affects all users that use STUN. A malicious actor located within the victim’s network may forge and send a specially crafted UDP (STUN) message that could remotely execute arbitrary code on the victim’s machine. Users are advised to upgrade as soon as possible. There are no known workarounds.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-37706 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2108 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Asterisk und Digium Certified Asterisk ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Asterisk und Digium Certified Asterisk ausnutzen, um beliebigen Programmcode auszuführen, einen Denial of Service Zustand herbeizuführen oder Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-2108