CVE-2017-16875 - CVE House
Back to Database
Status published High CVE-2017-16875

An issue was discovered in Teluu pjproject (pjlib and pjlib-util)...

Vulnerability Description

An issue was discovered in Teluu pjproject (pjlib and pjlib-util) in PJSIP before 2.7.1. The ioqueue component may issue a double key unregistration after an attacker initiates a socket connection with specific settings and sequences. Such double key unregistration will trigger an integer overflow, which may cause ioqueue backends to reject future key registrations.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-16875

Credits & Attribution

No credits recorded in the NVD database.

References

More from teluu

View All →
CVE-2021-43303
Buffer overflow in PJSUA API when calling pjsua_call_dump. An attacker-controlled...
Critical 9.8
CVE-2021-43302
Read out-of-bounds in PJSUA API when calling pjsua_recorder_create. An attacker-controlled...
Critical 9.1
CVE-2021-43301
Stack overflow in PJSUA API when calling pjsua_playlist_create. An attacker-controlled...
Critical 9.8
CVE-2021-43300
Stack overflow in PJSUA API when calling pjsua_recorder_create. An attacker-controlled...
Critical 9.8
CVE-2021-43299
Stack overflow in PJSUA API when calling pjsua_player_create. An attacker-controlled...
Critical 9.8

Affected Vendor

Affected Software

pjsip
Vulnerable Versions:
0

Timeline

Official Publish: November 17th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.