High severity7.5OSV Advisory· Published Mar 13, 2018· Updated Jun 17, 2026

CVE-2018-1000098

Description

Teluu PJSIP version 2.7.1 and earlier contains a Integer Overflow vulnerability in pjmedia SDP parsing that can result in Crash. This attack appear to be exploitable via Sending a specially crafted message. This vulnerability appears to have been fixed in 2.7.2.

Affected products

Pjsip/PjprojectOSV
Range: 2.7.1
Pjsip/Pjsip2 versions
cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*range: <=2.7.1
- (no CPE)range: <=2.7.1
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

trac.pjsip.org/repos/milestone/release-2.7.2nvdVendor Advisory
trac.pjsip.org/repos/ticket/2093nvdVendor Advisory
www.debian.org/security/2018/dsa-4170nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000