https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:09:21 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-410 certfr-2022-avi-410 https://cve.radiocsirt.org/vuln/certfr-2022-avi-410 https://cve.radiocsirt.org/vuln/euvd-2026-258786 EUVD-2026-258786 https://cve.radiocsirt.org/vuln/euvd-2026-258786 https://cve.radiocsirt.org/vuln/fkie_cve-2021-43845 <p>PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size.</p> <p>PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-43845 https://cve.radiocsirt.org/vuln/gsd-2021-43845 gsd-2021-43845 https://cve.radiocsirt.org/vuln/gsd-2021-43845 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-43845 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: asterisk, Ubuntu:Pro:16.04:LTS: pjproject, Ubuntu:18.04:LTS: asterisk, Ubuntu:Pro:18.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: ring, Ubuntu:20.04:LTS: ring, Ubuntu:20.04:LTS: asterisk, Ubuntu:22.04:LTS: asterisk, Ubuntu:24.04:LTS: asterisk, Ubuntu:25.10: asterisk and 1 more</p> <p>PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: asterisk, Ubuntu:Pro:16.04:LTS: pjproject, Ubuntu:18.04:LTS: asterisk, Ubuntu:Pro:18.04:LTS: pjproject, Ubuntu:Pro:18.04:LTS: ring, Ubuntu:20.04:LTS: ring, Ubuntu:20.04:LTS: asterisk, Ubuntu:22.04:LTS: asterisk, Ubuntu:24.04:LTS: asterisk, Ubuntu:25.10: asterisk and 1 more</p> <p>PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-43845