Vulnerabilities (CVE)

Filtered by vendor Teluu Subscribe
Filtered by product Pjsip
Total 42 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16875 1 Teluu 1 Pjsip 2026-06-17 5.0 MEDIUM 7.5 HIGH
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.
CVE-2017-16872 2 Debian, Teluu 2 Debian Linux, Pjsip 2026-06-17 7.5 HIGH 9.8 CRITICAL
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. Parsing the numeric header fields in a SIP message (like cseq, ttl, port, etc.) all had the potential to overflow, either causing unintended values to be captured or, if the values were subsequently converted back to strings, a buffer overrun. This will lead to a potential exploit using carefully crafted invalid values.