What is CVE-2020-15260?

CVE-2020-15260 is a medium-severity vulnerability in Pjsip Pjproject, classified under Improper Validation of Certificate with Host Mismatch. CVSS score: 6.8/10. Published 2021-03-10.

How severe is CVE-2020-15260?

Medium severity. CVSS v3 base score is 6.8 out of 10.

Vulnerability in Pjsip Pjproject

CVE-2020-15260

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In version 2.10 and earlier, PJSIP transport can be reused if they hav…

EPSS: 0.001 (31.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N.

Affected products

Pjsip Pjproject — versions <= 2.10

Weakness classification (CWE)

CWE-297 — Improper Validation of Certificate with Host Mismatch

References

github.com/pjsip/pjproject/security/advisories/GHSA-8hcp-hm38-mfph (x_refsource_CONFIRM)
github.com/pjsip/pjproject/commit/67e46c1ac45ad784db5b9080f5ed8b133c122872 (x_refsource_MISC)
github.com/pjsip/pjproject/pull/2663 (x_refsource_MISC)
GLSA-202107-42 (vendor-advisory, x_refsource_GENTOO)

Frequently asked questions

What is CVE-2020-15260?: CVE-2020-15260 is a medium-severity vulnerability in Pjsip Pjproject, classified under Improper Validation of Certificate with Host Mismatch. CVSS score: 6.8/10. Published 2021-03-10.
How severe is CVE-2020-15260?: Medium severity. CVSS v3 base score is 6.8 out of 10.