CVE-2021-41141

 

Published at: - 04-01-2022 08:15

Last modified: - 16-11-2022 08:07

Total changes: - 6

Description

PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In various parts of PJSIP, when error/failure occurs, it is found that the function returns without releasing the currently held locks. This could result in a system deadlock, which cause a denial of service for the users. No release has yet been made which contains the linked fix commit. All versions up to an including 2.11.1 are affected. Users may need to manually apply the patch.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://github.com/pjsip/pjproject/security/advisories/GHSA-8fmx-hqw7-6gmc
• https://github.com/pjsip/pjproject/commit/1aa2c0e0fb60a1b0bf793e0d834073ffe50fb196
• [debian-lts-announce] 20220328 [SECURITY] [DLA 2962-1] pjproject security update-Mailing List, Third Party Advisory
• GLSA-202210-37-Third Party Advisory

 

Keywords

NVD

 

CVE-2021-41141

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures