Fedora Account System
Red Hat Associate
Red Hat Customer
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process. PJSIP is a free and open source multimedia communication library written in C. Prior to commit d6a0e7f, a buffer overflow can occur in pjsip_generic_array_hdr_print() in pjsip/src/pjsip/sip_msg.c, the function that serializes generic array headers (such as Allow, Require, Supported, and Unsupported). Under certain output-buffer boundary conditions the function can write one byte past the end of the buffer. This is reachable mainly in applications that parse and re-serialize incoming SIP requests — for example a proxy, SBC, or B2BUA — where a remote peer can influence the serialized message. The out-of-bounds write is a single fixed byte; code execution and information disclosure are not demonstrated, and in typical pool-based allocations the byte falls within allocation slack. This issue has been patched via commit d6a0e7f.
This one does apply. The flaw is a buffer overflow in pjsip_generic_array_hdr_print() in pjsip/src/pjsip/sip_msg.c, the function that serializes generic array headers such as Allow, Require, Supported and Unsupported. Unlike the other pjproject CVEs filed against asterisk in this batch, it carries no gating condition, so the bundled copy is affected. Asterisk 23.5.0 bundles pjproject 2.17, which predates the fix (pjproject commit d6a0e7f). For context on severity, the upstream advisory describes the out-of-bounds write as a single fixed byte, notes that code execution and information disclosure are not demonstrated, and observes that in typical pool-based allocations the byte falls within allocation slack.
FEDORA-2026-9f63ee951e (asterisk-23.5.0-3.fc45) has been submitted as an update to Fedora 45. https://bodhi.fedoraproject.org/updates/FEDORA-2026-9f63ee951e