https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:34:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-258819 EUVD-2026-258819 https://cve.radiocsirt.org/vuln/euvd-2026-258819 https://cve.radiocsirt.org/vuln/fkie_cve-2023-27585 <p>PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn&#39;t affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A patch is available as commit `d1c5e4d` in the `master` branch. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead.</p> <p>PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn&#39;t affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A patch is available as commit `d1c5e4d` in the `master` branch. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-27585 https://cve.radiocsirt.org/vuln/gsd-2023-27585 gsd-2023-27585 https://cve.radiocsirt.org/vuln/gsd-2023-27585 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-27585 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: ring, Ubuntu:20.04:LTS: ring</p> <p>PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn&#39;t affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A patch is available as commit `d1c5e4d` in the `master` branch. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: ring, Ubuntu:20.04:LTS: ring</p> <p>PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications that use PJSIP DNS resolver. It doesn&#39;t affect PJSIP users who do not utilise PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record `parse_query()`, while the issue in CVE-2022-24793 is in `parse_rr()`. A patch is available as commit `d1c5e4d` in the `master` branch. A workaround is to disable DNS resolution in PJSIP config (by setting `nameserver_count` to zero) or use an external resolver implementation instead.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-27585