CVE-2026-84975

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>pjsip</name>
	<range><lt>FIXME</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>PJSIP is a free and open source multimedia communication library
	written in C. In 2.17 and earlier, the OpenSSL and GnuTLS backends in
	pjlib/src/pj/ssl_sock_ossl.c and pjlib/src/pj/ssl_sock_gtls.c copy DNS
	SubjectAltName values with string functions that recalculate their
	length and truncate an embedded NUL byte. With server verification
	enabled through --tls-verify-server for the PJSIP TLS/SIPS transport,
	a certificate containing a DNS SubjectAltName formed from the target
	hostname prefix followed by an embedded NUL and an attacker-controlled
	suffix can therefore be accepted for the prefix hostname. An attacker
	who possesses such a certificate from a trusted issuer and can
	intercept the connection can impersonate the target server, complete
	the SIP session, and receive REGISTER credentials. The mbedTLS backend
	is not affected because it preserves the explicit string length. No
	fixed version is available as of this review.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2026-84975</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2026-84975</url>
    </references>
    <dates>
      <discovery>2026-09-18</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>