Medium severity6.5NVD Advisory· Published Mar 10, 2021· Updated Jun 17, 2026

CVE-2021-21375

Description

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pjsip/Pjsip2 versions
cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*range: <=2.10
- (no CPE)range: <=2.10
Debian/linux
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Pjsip/Pjprojectcpe-rescue
Range: <= 2.10

Patches

Vulnerability mechanics

References

github.com/pjsip/pjproject/commit/97b3d7addbaa720b7ddb0af9bf6f3e443e664365nvdPatchThird Party Advisory
github.com/pjsip/pjproject/security/advisories/GHSA-hvq6-f89p-frvpnvdExploitPatchThird Party Advisory
lists.debian.org/debian-lts-announce/2021/04/msg00023.htmlnvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2021/05/msg00020.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202107-42nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000