CVE-2017-16875
HighSummary
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) before version 2.7.1 related to the ioqueue component, which may lead to double key unregistration after an attacker initiates a connection with specific settings. This situation can trigger an integer overflow, resulting in future key registrations being rejected by ioqueue backends.
Risk Assessment
The organization may face issues with key registration, potentially disrupting applications relying on PJSIP. An attacker could exploit this vulnerability to destabilize the system.
Recommendation
It is recommended to update Teluu pjproject to version 2.7.1 or later to mitigate this vulnerability. Additionally, monitoring network connections for suspicious activity can help secure the system.
Other vulnerabilities in Teluu pjproject (pjlib i pjlib-util)
Original NVD description (English source)
An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.