CVE-2022-23608: Use after free in PJSIP

Published Feb 22, 2022
·
Updated

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions up to and including 2.11.1 when in a dialog set (or forking) scenario, a hash key shared by multiple UAC dialogs can potentially be prematurely freed when one of the dialogs is destroyed . The issue may cause a dialog set to be registered in the hash table multiple times (with different hash keys) leading to undefined behavior such as dialog list collision which eventually leading to endless loop. A patch is available in commit db3235953baa56d2fb0e276ca510fefca751643f which will be included in the next release. There are no known workarounds for this issue.

Affected Software

23 affected componentsFixes available
debian/asterisk
1:16.28.0~dfsg-0+deb10u41:16.28.0~dfsg-0+deb11u31:16.28.0~dfsg-0+deb11u41:20.6.0~dfsg+~cs6.13.40431414-2
debian/ring<=20190215.1.f152c98~ds1-1+deb10u1, <=20210112.2.b757bac~ds1-1
20190215.1.f152c98~ds1-1+deb10u220230206.0~ds2-1.120231201.0~ds1-1
ubuntu/ring<20180228.1.503
20180228.1.503
ubuntu/ring<20190215.1.
20190215.1.
Teluu PJSIP<=2.11.1
Asterisk Certified Asterisk<16.8.0
Asterisk Certified Asterisk=16.8.0-cert1
Asterisk Certified Asterisk=16.8.0-cert10
Asterisk Certified Asterisk=16.8.0-cert11
Asterisk Certified Asterisk=16.8.0-cert12
Asterisk Certified Asterisk=16.8.0-cert2
Asterisk Certified Asterisk=16.8.0-cert3
Asterisk Certified Asterisk=16.8.0-cert4
Asterisk Certified Asterisk=16.8.0-cert5
Asterisk Certified Asterisk=16.8.0-cert6
Asterisk Certified Asterisk=16.8.0-cert7
Asterisk Certified Asterisk=16.8.0-cert8
Asterisk Certified Asterisk=16.8.0-cert9
Sangoma Asterisk>=16.0.0<16.24.1
Sangoma Asterisk>=18.0.0<18.10.1
Sangoma Asterisk>=19.0.0<19.2.1
Debian Debian Linux=9.0
Debian Debian Linux=10.0

Event History

Feb 22, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jan 12, 2024
Data Sourced
via Launchpad·12:07 AM
Description

Parent advisories

This vulnerability appears in the following advisories.

Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2022-23608?

CVE-2022-23608 is a vulnerability in the PJSIP multimedia communication library that allows an attacker to gain unauthorized access and potentially execute arbitrary code on affected systems.

2

Which software versions are affected by CVE-2022-23608?

Versions up to and including 2.11.1 of Teluu Pjsip, Asterisk Certified Asterisk 16.8.0, Sangoma Asterisk 16.0.0 to 16.24.1, Sangoma Asterisk 18.0.0 to 18.10.1, Sangoma Asterisk 19.0.0 to 19.2.1, and Debian Debian Linux 9.0 and 10.0 are affected by CVE-2022-23608.

3

What is the severity of CVE-2022-23608?

CVE-2022-23608 has a severity rating of 9.8 (Critical).

4

How does CVE-2022-23608 work?

CVE-2022-23608 allows an attacker to exploit a shared hash key used by multiple UAC dialogs in a dialog set or forking scenario, leading to unauthorized access and potential execution of arbitrary code.

5

How can I fix CVE-2022-23608?

To fix CVE-2022-23608, update to a fixed version of the affected software as recommended by the vendor or project maintainers.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203