CVE catalog

CVE-2026-33069

UBUNTU-CVE-2026-33069

[CVE catalog]

Severity
Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.27% · Oct 25, 2026

PJSIP is a free and open source multimedia communication library written in C. Versions 2.16 and below have a cascading out-of-bounds heap read in pjsip_multipart_parse(). After boundary string matching, curptr is advanced past the delimiter without verifying it has not reached the buffer end. This allows 1-2 bytes of adjacent heap memory to be read. All applications that process incoming SIP messages with multipart bodies or SDP content are potentially affected. This issue is resolved in version 2.17.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianasterisk140.1.11-3vulnerable
Debianasterisk140.1.11-3woody1vulnerable
Debianasterisk141:1.0.5-2vulnerable
Debianasterisk141:1.0.5-4vulnerable
Debianasterisk141:1.0.6-1vulnerable
Debianasterisk141:1.0.6-2vulnerable
Debianasterisk141:1.0.7-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge1vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge2vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge3vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge4vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge5vulnerable
Debianasterisk141:1.0.7.dfsg.1-2sarge6vulnerable
Debianasterisk141:1.0.9.dfsg-1vulnerable
Debianasterisk141:1.0.9.dfsg-3vulnerable
Debianasterisk141:1.0.9.dfsg-4vulnerable
Debianasterisk141:1.0.9.dfsg-5vulnerable
Debianasterisk141:1.0.9.dfsg-6vulnerable
Debianasterisk141:1.2.0-beta1.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-1vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-2vulnerable
Debianasterisk141:1.2.0-beta2.dfsg-3vulnerable
Debianasterisk141:1.2.0-rc1.dfsg-1vulnerable
Debianasterisk141:1.2.0-rc2.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-1vulnerable
Debianasterisk141:1.2.0.dfsg-2vulnerable
Debianasterisk141:1.2.0.dfsg-3vulnerable
Debianasterisk141:1.2.0.dfsg-4vulnerable
Debianasterisk141:1.2.0.dfsg-5vulnerable
Debianasterisk141:1.2.0.dfsg-6vulnerable
Debianasterisk141:1.2.1.dfsg-1vulnerable
Debianasterisk141:1.2.1.dfsg-2vulnerable
Debianasterisk141:1.2.1.dfsg-3vulnerable
Debianasterisk141:1.2.10.dfsg-1vulnerable
Debianasterisk141:1.2.10.dfsg-1bpo1vulnerable
Debianasterisk141:1.2.10.dfsg-2vulnerable
Debianasterisk141:1.2.10.dfsg-3vulnerable
Debianasterisk141:1.2.11.dfsg-1vulnerable
Debianasterisk141:1.2.12.1.dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-1vulnerable
Debianasterisk141:1.2.13~dfsg-2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch1vulnerable
Debianasterisk141:1.2.13~dfsg-2etch2vulnerable
Debianasterisk141:1.2.13~dfsg-2etch3vulnerable
Debianasterisk141:1.2.13~dfsg-2etch4vulnerable
Debianasterisk141:1.2.14~dfsg-1vulnerable
Debianasterisk141:1.2.14~dfsg-2vulnerable
Debianasterisk141:1.2.14~dfsg-3vulnerable
Debianasterisk141:1.2.14~dfsg-4vulnerable
Debianasterisk141:1.2.15~dfsg-1vulnerable
Debianasterisk141:1.2.16~dfsg-1vulnerable
Debianasterisk141:1.2.17~dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-1vulnerable
Debianasterisk141:1.2.4.dfsg-2vulnerable
Debianasterisk141:1.2.4.dfsg-3vulnerable
Debianasterisk141:1.2.4.dfsg-4vulnerable
Debianasterisk141:1.2.4.dfsg-5vulnerable
Debianasterisk141:1.2.4.dfsg-6vulnerable
Debianasterisk141:1.2.4.dfsg-6+b1vulnerable
Debianasterisk141:1.2.4.dfsg-7vulnerable
Debianasterisk141:1.2.7.1.dfsg-1vulnerable
Debianasterisk141:1.2.7.1.dfsg-2vulnerable
Debianasterisk141:1.2.7.1.dfsg-3vulnerable
Debianasterisk141:1.2.9.1.dfsg-1vulnerable
Debianasterisk141:1.4.10~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-1vulnerable
Debianasterisk141:1.4.11~dfsg-2vulnerable
Debianasterisk141:1.4.11~dfsg-3vulnerable
Debianasterisk141:1.4.11~dfsg-4vulnerable
Debianasterisk141:1.4.13~dfsg-1vulnerable
Debianasterisk141:1.4.15~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-1vulnerable
Debianasterisk141:1.4.16.2~dfsg-2vulnerable
Debianasterisk141:1.4.17~dfsg-1vulnerable
Debianasterisk141:1.4.17~dfsg-2vulnerable
Debianasterisk141:1.4.18.1~dfsg-1vulnerable
Debianasterisk141:1.4.18~dfsg-1vulnerable
Debianasterisk141:1.4.19.1~dfsg-1vulnerable
Debianasterisk141:1.4.20~dfsg-1vulnerable
Debianasterisk141:1.4.21.1~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-1vulnerable
Debianasterisk141:1.4.21.2~dfsg-2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny2.1vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny3vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny5vulnerable
Debianasterisk141:1.4.21.2~dfsg-3+lenny6vulnerable
Debianasterisk141:1.4.21.2~dfsg-3.1vulnerable
Debianasterisk141:1.4.2~dfsg-1vulnerable
Debianasterisk141:1.4.2~dfsg-2vulnerable
Debianasterisk141:1.4.2~dfsg-3vulnerable
Debianasterisk141:1.4.2~dfsg-4vulnerable
Debianasterisk141:1.4.2~dfsg-5vulnerable
Debianasterisk141:1.4.3~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-1vulnerable
Debianasterisk141:1.4.4~dfsg-2vulnerable
Debianasterisk141:1.4.4~dfsg-3vulnerable
Debianasterisk141:1.4.5~dfsg-1vulnerable
Debianasterisk141:1.4.6~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-1vulnerable
Debianasterisk141:1.4.8~dfsg-2vulnerable
Debianasterisk141:1.4.9~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg-1vulnerable
Debianasterisk141:1.6.1.0~dfsg~rc3-1vulnerable
Debianasterisk141:1.6.2.0-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~beta3-1vulnerable
Debianasterisk141:1.6.2.0~dfsg~rc1-1vulnerable
Debianasterisk141:1.6.2.0~rc3-1vulnerable
Debianasterisk141:1.6.2.0~rc3-2vulnerable
Debianasterisk141:1.6.2.0~rc6-1vulnerable
Debianasterisk141:1.6.2.0~rc7-1vulnerable
Debianasterisk141:1.6.2.2-1vulnerable
Debianasterisk141:1.6.2.6-1vulnerable
Debianasterisk141:1.6.2.7-1vulnerable
Debianasterisk141:1.6.2.9-1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+1vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+2vulnerable
Debianasterisk141:1.6.2.9-1~bpo50+3vulnerable
Debianasterisk141:1.6.2.9-2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze1vulnerable
Debianasterisk141:1.6.2.9-2+squeeze10vulnerable
Debianasterisk141:1.6.2.9-2+squeeze11vulnerable
Debianasterisk141:1.6.2.9-2+squeeze12vulnerable
Debianasterisk141:1.6.2.9-2+squeeze2vulnerable
Debianasterisk141:1.6.2.9-2+squeeze3vulnerable
Debianasterisk141:1.6.2.9-2+squeeze4vulnerable
Debianasterisk141:1.6.2.9-2+squeeze5vulnerable
Debianasterisk141:1.6.2.9-2+squeeze6vulnerable
Debianasterisk141:1.6.2.9-2+squeeze7vulnerable
Debianasterisk141:1.6.2.9-2+squeeze8vulnerable
Debianasterisk141:1.6.2.9-2+squeeze9vulnerable
Debianasterisk141:1.8.10.0~dfsg-1vulnerable
Debianasterisk141:1.8.10.1~dfsg-1vulnerable
Debianasterisk141:1.8.11.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1vulnerable
Debianasterisk141:1.8.13.0~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1+powerpcspe1vulnerable
Debianasterisk141:1.8.13.1~dfsg-1~bpo60+1vulnerable
Debianasterisk141:1.8.13.1~dfsg-2vulnerable
Debianasterisk141:1.8.13.1~dfsg-3vulnerable
Debianasterisk141:1.8.3.3-1vulnerable
Debianasterisk141:1.8.4-1vulnerable
Debianasterisk141:1.8.4.2-1vulnerable
Debianasterisk141:1.8.4.3-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-1vulnerable
Debianasterisk141:1.8.4.4~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-1vulnerable
Debianasterisk141:1.8.7.1~dfsg-2vulnerable
Debianasterisk141:1.8.7.1~dfsg-3vulnerable
Debianasterisk141:1.8.8.0~dfsg-1vulnerable
Debianasterisk141:1.8.8.2~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1vulnerable
Debianasterisk141:11.10.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.10.2~dfsg-1vulnerable
Debianasterisk141:11.10.2~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-1vulnerable
Debianasterisk141:11.11.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.11.0~dfsg-2vulnerable
Debianasterisk141:11.12.0~dfsg-1vulnerable
Debianasterisk141:11.12.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.12.1~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1vulnerable
Debianasterisk141:11.13.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.13.1~dfsg-1vulnerable
Debianasterisk141:11.13.1~dfsg-2vulnerable
Debianasterisk141:11.13.1~dfsg-2~bpo70+1vulnerable
Debianasterisk141:11.5.1~dfsg-1vulnerable
Debianasterisk141:11.5.1~dfsg-2vulnerable
Debianasterisk141:11.5.1~dfsg1-1vulnerable
Debianasterisk141:11.5.1~dfsg1-1~bpo70+1vulnerable
Debianasterisk141:11.6.0~dfsg-1vulnerable
Debianasterisk141:11.6.0~dfsg-2vulnerable
Debianasterisk141:11.6.0~dfsg-3vulnerable
Debianasterisk141:11.7.0~dfsg-1vulnerable
Debianasterisk141:11.7.0~dfsg-1+e1vulnerable
Debianasterisk141:11.7.0~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.8.0~dfsg-1vulnerable
Debianasterisk141:11.8.0~dfsg-2vulnerable
Debianasterisk141:11.8.1~dfsg-1vulnerable
Debianasterisk141:11.8.1~dfsg-1~bpo70+1vulnerable
Debianasterisk141:11.9.0~dfsg-1vulnerable
Debianasterisk141:11.9.0~dfsg-2vulnerable
Debianasterisk141:11.9.0~dfsg-2~bpo70+1vulnerable
Debianasterisk141:13.0.0~dfsg-1vulnerable
Debianasterisk141:13.0.0~dfsg-2vulnerable
Debianasterisk141:13.1.0~dfsg-1vulnerable
Debianasterisk141:13.1.0~dfsg-1.1vulnerable
Debianasterisk141:13.10.0~dfsg-1vulnerable
Debianasterisk141:13.11.2~dfsg-1vulnerable
Debianasterisk141:13.12.1~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-1vulnerable
Debianasterisk141:13.12.2~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-1vulnerable
Debianasterisk141:13.13.1~dfsg-2vulnerable
Debianasterisk141:13.13.1~dfsg-3vulnerable
Debianasterisk141:13.13.1~dfsg-3~exp1vulnerable
Debianasterisk141:13.13.1~dfsg-4vulnerable
Debianasterisk141:13.14.0~dfsg-1vulnerable
Debianasterisk141:13.14.0~dfsg-1~exp1vulnerable
Debianasterisk141:13.14.1~dfsg-1vulnerable
Debianasterisk141:13.14.1~dfsg-2vulnerable
Debianasterisk141:13.17.0~dfsg-1vulnerable
Debianasterisk141:13.17.0~dfsg-2vulnerable
Debianasterisk141:13.17.1~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-1vulnerable
Debianasterisk141:13.17.2~dfsg-2vulnerable
Debianasterisk141:13.18.1~dfsg-1vulnerable
Debianasterisk141:13.18.3~dfsg-1vulnerable
Debianasterisk141:13.18.5~dfsg-1vulnerable
Debianasterisk141:13.20.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-1vulnerable
Debianasterisk141:13.22.0~dfsg-2vulnerable
Debianasterisk141:13.23.1~dfsg-1vulnerable
Debianasterisk141:13.23.1~dfsg-2vulnerable
Debianasterisk141:13.7.2~dfsg-1vulnerable
Debianasterisk141:13.8.0~dfsg-1vulnerable
Debianasterisk141:13.8.2~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-1vulnerable
Debianasterisk141:13.9.1~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-1vulnerable
Debianasterisk141:16.1.0~dfsg-2vulnerable
Debianasterisk141:16.1.0~dfsg-3vulnerable
Debianasterisk141:16.1.0~dfsg-4vulnerable
Debianasterisk141:16.1.1~dfsg-1vulnerable
Debianasterisk141:16.10.0~dfsg-1vulnerable
Debianasterisk141:16.12.0~dfsg-1vulnerable
Debianasterisk141:16.15.0~dfsg-1vulnerable
Debianasterisk141:16.15.1~dfsg-1vulnerable
Debianasterisk141:16.16.1~dfsg+~2.10-1vulnerable
Debianasterisk141:16.16.1~dfsg+~2.10-2vulnerable
Debianasterisk141:16.16.1~dfsg-1vulnerable
Debianasterisk141:16.16.1~dfsg-1~bpo10+1vulnerable
Debianasterisk141:16.16.1~dfsg-2vulnerable
Debianasterisk141:16.16.1~dfsg-3vulnerable
Debianasterisk141:16.16.1~dfsg-4vulnerable
Debianasterisk141:16.2.0~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-1vulnerable
Debianasterisk141:16.2.1~dfsg-2vulnerable
Debianasterisk141:16.23.0~dfsg+~2.10-1vulnerable
Debianasterisk141:16.23.0~dfsg+~cs6.10.20220309-1vulnerable
Debianasterisk141:16.23.0~dfsg+~cs6.10.20220309-2vulnerable
Debianasterisk141:16.23.0~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:18.10.0~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:18.10.0~dfsg+~cs6.10.40431411-2vulnerable
Debianasterisk141:18.10.1~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:18.11.1~dfsg+~cs6.10.40431413-1vulnerable
Debianasterisk141:18.11.2~dfsg+~cs6.10.40431413-1vulnerable
Debianasterisk141:18.12.0~dfsg+~cs6.12.40431413-1vulnerable
Debianasterisk141:18.14.0~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:18.14.0~~rc1~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:18.9.0~dfsg+~cs6.10.40431411-1vulnerable
Debianasterisk141:20.0.0~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.0.0~dfsg+~cs6.12.40431414-2vulnerable
Debianasterisk141:20.0.0~~rc1~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.0.0~~rc2~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.0.1~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.1.0~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.1.0~~rc2~dfsg+~cs6.12.40431414-1vulnerable
Debianasterisk141:20.2.1~dfsg+~cs6.13.40431413-1vulnerable
Debianasterisk141:20.3.0~dfsg+~cs6.13.40431413-1vulnerable
Debianasterisk141:20.4.0~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.4.0~dfsg+~cs6.13.40431414-2vulnerable
Debianasterisk141:20.5.0~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.5.1~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.5.2~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.6.0~dfsg+~cs6.13.40431414-1vulnerable
Debianasterisk141:20.6.0~dfsg+~cs6.13.40431414-2vulnerable
Debianasterisk141:20.8.1~dfsg+~cs6.14.40431414-1vulnerable
Debianasterisk141:20.9.3~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.0.0~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.0.0~~rc2~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.1.0~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.1.1~dfsg+~cs6.14.60671435-1vulnerable
Debianasterisk141:22.2.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.2.0~dfsg+~cs6.15.60671435-2vulnerable
Debianasterisk141:22.3.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.3.0~~rc1~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.4.1~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.4.1~dfsg+~cs6.15.60671435-2vulnerable
Debianasterisk141:22.5.1~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.5.2~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.6.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.7.0~dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.8.0+dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.8.2+dfsg+~cs6.15.60671435-1vulnerable
Debianasterisk141:22.9.0+dfsg+~cs6.16.60671434-1vulnerable
Debianasterisk141:22.10.0+dfsg+~cs6.17.60671434-1fixed
Alpinepjproject3.242.17-r0fixed
Ubuntupjprojectpro2.6~dfsg-2vulnerable
Ubuntupjprojectpro2.7~dfsg-1vulnerable
Ubuntupjprojectpro2.7.1~dfsg-1vulnerable
Ubuntupjprojectpro2.7.1~dfsg-1build1vulnerable
Ubuntupjprojectpro2.7.2~dfsg-1vulnerable
Ubuntupjprojectpro2.7.2~dfsg-1ubuntu0.1~esm1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianasteriskdeb141:22.10.0+dfsg+~cs6.17.60671434-1Not reportedDEBIAN-CVE-2026-33069Not reported
Alpinepjprojectapk3.242.17-r0Not reportedALPINE-CVE-2026-33069Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]