Blog - LINE ENGINEERING

TAG ARCHIVES: Asterisk

Buffer overflow in PJSIP, a VoIP open source library
Kim Youngsung2018-02-26
He's a security engineer at LINE. He enjoys looking for bugs and is highly interested in secure coding.
Hi all, I am Youngsung Kim (Facebook, Twitter) of the Application Security team at LINE and am in charge of evaluating security of LINE services. On this post, I'd like to share a vulnerability (CVE-2017-16872, AST-2017-009) of PJSIP, a VoIP open source library. PJSIP is a multimedia communication library based on the following standard protocols; SIP, SDP, RTP, STUN, TURN, and ICE. The Asterisk framework, widely used on IP-PBX and VoPI gateway has an SIP stack implemented based on PJSIP.

1