Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2021-41141HistoryJan 04, 2022 - 7:15 p.m.
CVE-2021-41141
2022-01-0419:15:00
Debian Security Bug Tracker
security-tracker.debian.org
15
cve-2021-41141
pjsip
multimedia communication
denial of service
sip
sdp
rtp
stun
turn
ice
system deadlock
patch
vulnerability
unix
EPSS
0.004
Percentile
73.1%
PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In various parts of PJSIP, when error/failure occurs, it is found that the function returns without releasing the currently held locks. This could result in a system deadlock, which cause a denial of service for the users. No release has yet been made which contains the linked fix commit. All versions up to an including 2.11.1 are affected. Users may need to manually apply the patch.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | pjproject | < 2.5.5~dfsg-6+deb9u1 | pjproject_2.5.5~dfsg-6+deb9u1_all.deb |
Related
cvelist
cvelist
CVE-2021-41141 Missing release of locks in PJSIP
2022-01-04 00:00:00
nvd
nvd
CVE-2021-41141
2022-01-04 19:15:14
ubuntucve
ubuntucve
CVE-2021-41141
2022-01-04 00:00:00
prion
prion
Design/Logic Flaw
2022-01-04 19:15:00
osv
osv
CVE-2021-41141
2022-01-04 19:15:14
pjproject - security update
2022-03-28 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-03-12 10:26:54
alpinelinux
alpinelinux
CVE-2021-41141
2022-01-04 19:15:14
cve
cve
CVE-2021-41141
2022-01-04 19:15:14
debian
debian
[SECURITY] [DLA 2962-1] pjproject security update
2022-03-28 14:23:21
nessus
nessus
Debian DLA-2962-1 : pjproject - LTS security update
2022-03-30 00:00:00
GLSA-202210-37 : PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-2962-1)
2022-03-29 00:00:00
gentoo
gentoo
PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00