Published: 10/03/2021 Updated: 21/10/2022

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and previous versions, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service.

Vulnerable Product	Search on Vulmon	Subscribe to Product
teluu pjsip
debian debian linux 9.0

Debian Bug report logs - #986815 CVE-2021-21375 CVE-2020-15260 Package: src:ring; Maintainer for src:ring is Debian VoIP Team <pkg-voip-maintainers@listsaliothdebianorg>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Mon, 12 Apr 2021 11:24:01 UTC Severity: grave Tags: security, upstream Reply or sub ...

CWE-754 https://github.com/pjsip/pjproject/commit/97b3d7addbaa720b7ddb0af9bf6f3e443e664365 https://github.com/pjsip/pjproject/security/advisories/GHSA-hvq6-f89p-frvp https://lists.debian.org/debian-lts-announce/2021/04/msg00023.html https://lists.debian.org/debian-lts-announce/2021/05/msg00020.html https://security.gentoo.org/glsa/202107-42 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=986815 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2021-21375

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect