Unrated severityNVD Advisory· Published Mar 10, 2021· Updated Aug 3, 2024
Crash in receiving updated SDP answer after initial SDP negotiation failed
CVE-2021-21375
Description
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
5- security.gentoo.org/glsa/202107-42mitrevendor-advisoryx_refsource_GENTOO
- github.com/pjsip/pjproject/commit/97b3d7addbaa720b7ddb0af9bf6f3e443e664365mitrex_refsource_MISC
- github.com/pjsip/pjproject/security/advisories/GHSA-hvq6-f89p-frvpmitrex_refsource_CONFIRM
- lists.debian.org/debian-lts-announce/2021/04/msg00023.htmlmitremailing-listx_refsource_MLIST
- lists.debian.org/debian-lts-announce/2021/05/msg00020.htmlmitremailing-listx_refsource_MLIST
News mentions
0No linked articles in our index yet.