CVE-2023-27585

Related Files

Gentoo Linux Security Advisory 202409-05

Posted Sep 23, 2024

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 202409-5 - A vulnerability has been discovered in PJSIP, which could lead to arbitrary code execution. Versions greater than or equal to 2.13.1 are affected.

tags | advisory, arbitrary, code execution

systems | linux, gentoo

advisories | CVE-2023-27585

SHA-256 | 5e38f072010ee285cf46682abfd102f781b53d058c1210e1b018a140dfd64745

Download | Favorite | View

Ubuntu Security Notice USN-6422-2

Posted Oct 24, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6422-2 - It was discovered that Ring incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. It was discovered that Ring incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service.

tags | advisory, remote, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2021-37706, CVE-2021-43303, CVE-2022-21722, CVE-2022-23537, CVE-2022-24763, CVE-2022-39244, CVE-2023-27585

SHA-256 | 259a2cf38720d88c7724b592d8b82e467ba99d2e75f4685b7441266a46273ac4

Download | Favorite | View

Ubuntu Security Notice USN-6422-1

Posted Oct 10, 2023

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 6422-1 - It was discovered that Ring incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code. It was discovered that Ring incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.

tags | advisory, remote, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2021-37706, CVE-2021-43302, CVE-2021-43303, CVE-2021-43804, CVE-2022-21722, CVE-2022-23537, CVE-2022-23547, CVE-2022-23608, CVE-2022-24763, CVE-2022-24764, CVE-2022-24793, CVE-2022-39244, CVE-2023-27585

SHA-256 | 41140452a02c039396cd3c29ae8d013f08f3585edf5434bbe5feb4a14dcfbdd3

Download | Favorite | View

Debian Security Advisory 5438-1

Posted Jun 23, 2023

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5438-1 - A flaw was found in Asterisk, an Open Source Private Branch Exchange. A buffer overflow vulnerability affects users that use PJSIP DNS resolver. This vulnerability is related to CVE-2022-24793. The difference is that this issue is in parsing the query record parse_query(), while the issue in CVE-2022-24793 is in parse_rr(). A workaround is to disable DNS resolution in PJSIP config (by setting nameserver_count to zero) or use an external resolver implementation instead.

tags | advisory, overflow

systems | linux, debian

advisories | CVE-2023-27585

SHA-256 | 36f72d3d649edb95df059fb18d510eb21ac8c037e62356c078f3a169cddb0f4c

Download | Favorite | View