[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZEare1E0zyeltPrD_0KB1m4kmghSP7PYgppK4ha2Z0Q":3,"g5a-risk:CVE-2022-21723":242},{"success":4,"data":5,"meta":240},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":27,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":72,"references":73,"referencesCount":131,"weaknesses":132,"weaknessesCount":140,"isActivelyExploited":46,"cisaInfo":27,"otxData":27,"relatedBlogPosts":141,"seoMetadata":142,"configurations":167,"relatedVendorCves":238,"notableEvents":239},"CVE-2022-21723","What is CVE-2022-21723?","PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In versions 2.11.1 and prior, parsing an incoming SIP message that contains a malformed multipart can potentially cause out-of-bound read access. This issue affects all PJSIP users that accept SIP multipart. The patch is available as commit in the `master` branch. There are no known workarounds.","PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TUR...","2022-01-27T00:15:07.737","2025-11-04T16:15:46.583",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":34,"CVSSMetricV2":35,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.2,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},[],[36],{"Source":31,"Type":32,"CVSSData":37,"BaseSeverity":43,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":46,"ObtainAllPrivilege":46,"ObtainUserPrivilege":46,"ObtainOtherPrivilege":46,"UserInteractionRequired":46},{"Version":38,"VectorString":39,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":40,"IntegrityImpact":23,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":42,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:P","PARTIAL",6.4,"","MEDIUM",10,4.9,false,0.04357,[47,47,47,47,47,47,47],"Critical",[51,56,61,64,69],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"teluu","pjsip","*","cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*",{"vendor":57,"product":58,"version":59,"criteria":60,"vulnerable":4},"asterisk","certified_asterisk","16.8.0","cpe:2.3:a:asterisk:certified_asterisk:16.8.0:*:*:*:*:*:*:*",{"vendor":62,"product":57,"version":54,"criteria":63,"vulnerable":4},"sangoma","cpe:2.3:a:sangoma:asterisk:*:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":67,"criteria":68,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":65,"product":66,"version":70,"criteria":71,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",5,[74,80,86,90,93,97,100,103,107,110,112,114,116,118,120,122,124,127,129],{"url":75,"source":76,"tags":77},"http:\u002F\u002Fpacketstormsecurity.com\u002Ffiles\u002F166227\u002FAsterisk-Project-Security-Advisory-AST-2022-006.html","Packetstormsecurity",[78,79],"Third Party Advisory","VDB Entry",{"url":81,"source":82,"tags":83},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2022\u002FMar\u002F2","Seclists",[84,85,78],"Mailing List","Patch",{"url":87,"source":88,"tags":89},"https:\u002F\u002Fgithub.com\u002Fpjsip\u002Fpjproject\u002Fcommit\u002F077b465c33f0aec05a49cd2ca456f9a1b112e896","GitHub",[85,78],{"url":91,"source":88,"tags":92},"https:\u002F\u002Fgithub.com\u002Fpjsip\u002Fpjproject\u002Fsecurity\u002Fadvisories\u002FGHSA-7fw8-54cv-r7pm",[85,78],{"url":94,"source":95,"tags":96},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F03\u002Fmsg00035.html","Debian",[84,78],{"url":98,"source":95,"tags":99},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F11\u002Fmsg00021.html",[84,78],{"url":101,"source":95,"tags":102},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F08\u002Fmsg00038.html",[],{"url":104,"source":105,"tags":106},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202210-37","Gentoo",[78],{"url":108,"source":95,"tags":109},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2022\u002Fdsa-5285",[78],{"url":75,"source":76,"tags":111},[78,79],{"url":81,"source":82,"tags":113},[84,85,78],{"url":87,"source":88,"tags":115},[85,78],{"url":91,"source":88,"tags":117},[85,78],{"url":94,"source":95,"tags":119},[84,78],{"url":98,"source":95,"tags":121},[84,78],{"url":101,"source":95,"tags":123},[],{"url":125,"source":95,"tags":126},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00030.html",[],{"url":104,"source":105,"tags":128},[78],{"url":108,"source":95,"tags":130},[78],19,[133],{"id":134,"name":135,"description":136,"extendedDescription":42,"status":137,"abstraction":138,"structure":139},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","Draft","Base","Simple",1,[],{"title":143,"metaDescription":144,"keywords":145,"canonicalUrl":146,"structuredData":147},"What is CVE-2022-21723? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-21723, a critical severity cyber security vulnerability from 2022. PJSIP is a free and open source multimedia communicatio...","CVE-2022-21723, CVE-2022-21723 vulnerability, CVE-2022-21723 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, teluu security, asterisk security, sangoma security, debian security, pjsip vulnerability, certified_asterisk vulnerability, asterisk vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2022-21723",{"@context":148,"@type":149,"headline":143,"description":144,"datePublished":10,"dateModified":11,"author":150,"publisher":154,"about":158,"mainEntityOfPage":162,"articleSection":165,"keywords":166},"https:\u002F\u002Fschema.org","TechArticle",{"@type":151,"name":152,"url":153},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":151,"name":152,"url":153,"logo":155},{"@type":156,"url":157},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":159,"name":6,"description":160,"additionalType":161},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":163,"@id":164},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-21723","Cybersecurity","CVE-2022-21723, CVE-2022-21723 vulnerability, CVE-2022-21723 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[168,176,230],{"Operator":27,"Negate":27,"Nodes":169},[170],{"Operator":171,"Negate":46,"CPEMatch":172},"OR",[173],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":174,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":175},"6BB0273A-3235-4BC7-A1BE-7D35BABD8617","2.11.1",{"Operator":27,"Negate":27,"Nodes":177},[178],{"Operator":171,"Negate":46,"CPEMatch":179},[180,182,185,188,191,194,197,200,203,206,209,212,215,218,222,226],{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":181,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"FC49FD2F-9A64-4F92-9B73-50E37BEB207E",{"Vulnerable":4,"Criteria":183,"MatchCriteriaID":184,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert1:*:*:*:*:*:*","E64BCD44-2298-4710-9CC3-DF82E6A8DF94",{"Vulnerable":4,"Criteria":186,"MatchCriteriaID":187,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert10:*:*:*:*:*:*","91CCAB0C-C0F8-4619-AAE1-F6F13FF31570",{"Vulnerable":4,"Criteria":189,"MatchCriteriaID":190,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert11:*:*:*:*:*:*","F2B7CBB3-E037-416B-AD16-9A553D6A4775",{"Vulnerable":4,"Criteria":192,"MatchCriteriaID":193,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert12:*:*:*:*:*:*","DE7DDFE1-6A06-477A-AB45-D00053CFA7EC",{"Vulnerable":4,"Criteria":195,"MatchCriteriaID":196,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert2:*:*:*:*:*:*","A35C117A-6EFB-42EB-AD2A-EA7866606927",{"Vulnerable":4,"Criteria":198,"MatchCriteriaID":199,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert3:*:*:*:*:*:*","40003CBE-792F-4875-9E60-6F1CE0BBAA8E",{"Vulnerable":4,"Criteria":201,"MatchCriteriaID":202,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert4:*:*:*:*:*:*","46A7AA7B-13F2-496A-99ED-1CC13234E8CB",{"Vulnerable":4,"Criteria":204,"MatchCriteriaID":205,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert5:*:*:*:*:*:*","147663CB-B48D-4D89-96BF-F92FF96F347F",{"Vulnerable":4,"Criteria":207,"MatchCriteriaID":208,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert6:*:*:*:*:*:*","27DBBC83-930A-4ECE-8C1E-47481D881B0D",{"Vulnerable":4,"Criteria":210,"MatchCriteriaID":211,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert7:*:*:*:*:*:*","B987A13D-A363-4DCE-BBA1-E35E81ACBA60",{"Vulnerable":4,"Criteria":213,"MatchCriteriaID":214,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert8:*:*:*:*:*:*","01A5B7F9-FAD2-4C0C-937D-CF1086512130",{"Vulnerable":4,"Criteria":216,"MatchCriteriaID":217,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"cpe:2.3:a:asterisk:certified_asterisk:16.8.0:cert9:*:*:*:*:*:*","F60B4271-F987-4932-86EE-45ED099661E1",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":219,"VersionStartExcluding":27,"VersionStartIncluding":220,"VersionEndExcluding":221,"VersionEndIncluding":27},"DE99C3B4-20EC-4AC8-9A0A-C690E2DBED99","16.0.0","16.24.1",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":223,"VersionStartExcluding":27,"VersionStartIncluding":224,"VersionEndExcluding":225,"VersionEndIncluding":27},"C109B569-DE0D-4AE4-A128-239077CCC05F","18.0.0","18.10.1",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":227,"VersionStartExcluding":27,"VersionStartIncluding":228,"VersionEndExcluding":229,"VersionEndIncluding":27},"44E4E3A7-8CB3-491C-98F6-F78345533E3B","19.0.0","19.2.1",{"Operator":27,"Negate":27,"Nodes":231},[232],{"Operator":171,"Negate":46,"CPEMatch":233},[234,236],{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":235,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":237,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",[],[],{"lastModified":11,"cacheTime":241,"version":38},1792447770019,{"score":243,"band":244,"action":245,"scoredAt":246},55,"Medium","Plan remediation","2026-10-16T06:53:17.453423+00:00"]