Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2021-32686
Analyzed
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-23 Jul, 2021 | 22:15
Updated At-16 Nov, 2022 | 19:02

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP before version 2.11.1, there are a couple of issues found in the SSL socket. First, a race condition between callback and destroy, due to the accepted socket having no group lock. Second, the SSL socket parent/listener may get destroyed during handshake. Both issues were reported to happen intermittently in heavy load TLS connections. They cause a crash, resulting in a denial of service. These are fixed in version 2.11.1.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.15.9MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Secondary3.15.9MEDIUM
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary2.04.3MEDIUM
AV:N/AC:M/Au:N/C:N/I:N/A:P
CPE Matches

teluu
teluu
>>pjsip>>Versions before 2.11.1(exclusive)
cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*
Debian GNU/Linux
debian
>>debian_linux>>9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Debian GNU/Linux
debian
>>debian_linux>>11.0
cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-362Primarysecurity-advisories@github.com
CWE-362Secondarynvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/pjsip/pjproject/commit/d5f95aa066f878b0aef6a64e60b61e8626e664cdsecurity-advisories@github.com
Patch
Third Party Advisory
https://github.com/pjsip/pjproject/pull/2716security-advisories@github.com
Patch
Third Party Advisory
https://github.com/pjsip/pjproject/releases/tag/2.11.1security-advisories@github.com
Release Notes
Third Party Advisory
https://github.com/pjsip/pjproject/security/advisories/GHSA-cv8x-p47p-99wrsecurity-advisories@github.com
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/03/msg00035.htmlsecurity-advisories@github.com
Mailing List
Third Party Advisory
https://security.gentoo.org/glsa/202210-37security-advisories@github.com
Third Party Advisory
https://www.debian.org/security/2021/dsa-4999security-advisories@github.com
Third Party Advisory
Change History
0Changes found

Details not found