CVE-2021-21375

 

Published at: - 11-03-2021 12:15

Last modified: - 22-10-2022 12:40

Total changes: - 10

Description

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://github.com/pjsip/pjproject/commit/97b3d7addbaa720b7ddb0af9bf6f3e443e664365
• https://github.com/pjsip/pjproject/security/advisories/GHSA-hvq6-f89p-frvp
• [debian-lts-announce] 20210423 [SECURITY] [DLA 2636-1] pjproject security update-Mailing List, Third Party Advisory
• [debian-lts-announce] 20210523 [SECURITY] [DLA 2665-1] ring security update-Mailing List, Third Party Advisory
• GLSA-202107-42-Third Party Advisory

 

Keywords

NVD

 

CVE-2021-21375

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures