CVE-2021-43301

NameCVE-2021-43301
DescriptionStack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled 'file_names' argument may cause a buffer overflow since it is copied to a fixed-size stack buffer without any size validation.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
ReferencesDLA-2962-1, DLA-3194-1, DLA-3549-1, DLA-3887-1, DSA-5285-1
Debian Bugs1014998

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
asterisk (PTS)bullseye (security), bullseye1:16.28.0~dfsg-0+deb11u4fixed
sid1:20.9.3~dfsg+~cs6.14.60671435-1fixed
ring (PTS)bullseye20210112.2.b757bac~ds1-1vulnerable
bullseye (security)20210112.2.b757bac~ds1-1+deb11u1fixed
bookworm20230206.0~ds2-1.1fixed
sid20231201.0~ds1-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
asterisksourcestretch(not affected)
asterisksourcebuster1:16.28.0~dfsg-0+deb10u1DLA-3194-1
asterisksourcebullseye1:16.28.0~dfsg-0+deb11u1DSA-5285-1
asterisksource(unstable)1:18.11.1~dfsg+~cs6.10.40431413-1
pjprojectsourcestretch2.5.5~dfsg-6+deb9u3DLA-2962-1
pjprojectsource(unstable)(unfixed)
ringsourcebuster20190215.1.f152c98~ds1-1+deb10u2DLA-3549-1
ringsourcebullseye20210112.2.b757bac~ds1-1+deb11u1DLA-3887-1
ringsource(unstable)20230206.0~ds1-11014998

Notes

[stretch] - asterisk <not-affected> (Vulnerable code not present)
https://github.com/pjsip/pjproject/security/advisories/GHSA-qcvw-h34v-c7r9
https://github.com/pjsip/pjproject/commit/d979253c924a686fa511d705be1f3ad0c5b20337

Search for package or bug name: Reporting problems