ZeroHour

CVE-2021-21375

PoC
CVSS 3.1
6.5 medium
EPSS
2%p80
Published
()
Modified
Description

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service.

Vendors
teluudebian
Products
pjsip, debian linux
Weakness
CWE-400, CWE-754
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

In the news

No ingested article mentions this CVE yet.