PJSIP PJNATH Buffer Overflow Vulnerability in ICE Session Credential Processing

A buffer overflow vulnerability has been identified in the PJSIP library, specifically within the PJNATH component's ICE session handling. This issue arises in versions 2.16 and earlier when the library processes credentials containing excessively long usernames. The vulnerability could lead to memory corruption or control flow hijacking, allowing for potentially arbitrary code execution. Applications utilizing ICE may experience unexpected termination or exploitation of this vulnerability.

Impact

The vulnerability could be exploited to cause a buffer overflow, leading to memory corruption or control flow hijacking. This could allow an attacker to execute arbitrary code under the application's privileges.

Remediation

Users can upgrade to PJSIP version 2.17, where this vulnerability has been patched.