Medium severity5.9NVD Advisory· Published Jan 4, 2022· Updated Jun 17, 2026
CVE-2021-41141
CVE-2021-41141
Description
PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In various parts of PJSIP, when error/failure occurs, it is found that the function returns without releasing the currently held locks. This could result in a system deadlock, which cause a denial of service for the users. No release has yet been made which contains the linked fix commit. All versions up to an including 2.11.1 are affected. Users may need to manually apply the patch.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4Patches
Vulnerability mechanics
References
4- github.com/pjsip/pjproject/commit/1aa2c0e0fb60a1b0bf793e0d834073ffe50fb196nvdPatchThird Party Advisory
- github.com/pjsip/pjproject/security/advisories/GHSA-8fmx-hqw7-6gmcnvdPatchThird Party Advisory
- lists.debian.org/debian-lts-announce/2022/03/msg00035.htmlnvdMailing ListThird Party Advisory
- security.gentoo.org/glsa/202210-37nvdThird Party Advisory
News mentions
0No linked articles in our index yet.