The vulnerability of the SSL socket layer of the Asterisk IP telephony management system, which implements the SIP protocol PJSIP, allows attackers to induce a service failure.

SSL socket vulnerability in Asterisk telephony with Session Initiation Protocol enabling remote service failures via unsynchronized shared resources.

Reporter	Title	Published	Views	Family All 74
FreeBSD	asterisk -- pjproject/pjsip: crash when SSL socket destroyed during handshake	5 May 202100:00	–	freebsd
FreeBSD	pjsip -- Race condition in SSL socket server	23 Jul 202100:00	–	freebsd
AlpineLinux	CVE-2021-32686	23 Jul 202100:00	–	alpinelinux
CNNVD	PJSIP 竞争条件问题漏洞	22 Jul 202100:00	–	cnnvd
CNVD	PJSIP competition condition issue vulnerability	30 Jul 202100:00	–	cnvd
CVE	CVE-2021-32686	23 Jul 202100:00	–	cve
Cvelist	CVE-2021-32686 Denial of Service in PJSIP	23 Jul 202100:00	–	cvelist
Debian	[SECURITY] [DLA 2962-1] pjproject security update	28 Mar 202214:23	–	debian
Debian	[SECURITY] [DLA 3887-1] ring security update	15 Sep 202401:13	–	debian
Debian	[SECURITY] [DSA 4999-1] asterisk security update	1 Nov 202119:36	–	debian

Vulners

Node

digium,asteriskRange16.0–16.19.1

digium,asteriskRange17.0–17.9.4

digium,asteriskRange18.0–18.5.1

Source	Link
downloads	www.downloads.asterisk.org/pub/security/AST-2021-009.html
github	www.github.com/pjsip/pjproject/commit/d5f95aa066f878b0aef6a64e60b61e8626e664cd
github	www.github.com/pjsip/pjproject/pull/2716
github	www.github.com/pjsip/pjproject/security/advisories/GHSA-cv8x-p47p-99wr
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32686
security-tracker	www.security-tracker.debian.org/tracker/CVE-2021-32686
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5/
web	www.web.nvd.nist.gov/view/vuln/detail

18 Oct 2022 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 35.9

CVSS 27.1

EPSS0.02082