Lucene search
Veracode Vulnerability DatabaseVERACODE:31444HistoryJul 30, 2021 - 12:58 p.m.
Denial Of Service (DoS)
2021-07-3012:58:57
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
19
pjsip
vulnerability
dos
race condition
software
EPSS
0.008
Percentile
81.7%
PJSIP is vulnerable to denial of service. A race condition between callback and destroy and an insecure SSL socket parent/listener allows an attacker to cause an applicatino crash.
References
github.com/pjsip/pjproject/commit/d5f95aa066f878b0aef6a64e60b61e8626e664cd
github.com/pjsip/pjproject/pull/2716
github.com/pjsip/pjproject/releases/tag/2.11.1
github.com/pjsip/pjproject/security/advisories/GHSA-cv8x-p47p-99wr
lists.debian.org/debian-lts-announce/2022/03/msg00035.html
secdb.alpinelinux.org/edge/main.yaml
www.debian.org/security/2021/dsa-4999
Related
nvd
nvd
CVE-2021-32686
2021-07-23 22:15:08
prion
prion
Race condition
2021-07-23 22:15:00
ubuntucve
ubuntucve
CVE-2021-32686
2021-07-23 00:00:00
freebsd
freebsd
pjsip -- Race condition in SSL socket server
2021-07-23 00:00:00
cvelist
cvelist
CVE-2021-32686 Denial of Service in PJSIP
2021-07-23 00:00:00
alpinelinux
alpinelinux
CVE-2021-32686
2021-07-23 22:15:08
nessus
nessus
FreeBSD : pjsip -- Race condition in SSL socket server (92ad12b8-ec09-11eb-aef1-0897988a1c07)
2021-07-26 00:00:00
FreeBSD : asterisk -- pjproject/pjsip: crash when SSL socket destroyed during handshake (53fbffe6-ebf7-11eb-aef1-0897988a1c07)
2021-07-26 00:00:00
Debian DSA-4999-1 : asterisk - security update
2021-11-02 00:00:00
mageia
mageia
Updated pjproject packages fix security vulnerability
2021-12-19 15:26:08
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0559)
2022-01-28 00:00:00
Asterisk Multiple DoS Vulnerabilities (AST-2021-008, AST-2021-009)
2021-07-23 00:00:00
Debian: Security Advisory (DSA-4999-1)
2021-11-03 00:00:00
osv
osv
CVE-2021-32686
2021-07-23 22:15:08
asterisk - security update
2021-11-01 00:00:00
pjproject - security update
2022-03-28 00:00:00
cnvd
cnvd
PJSIP competition condition issue vulnerability
2021-07-30 00:00:00
debiancve
debiancve
CVE-2021-32686
2021-07-23 22:15:08
cve
cve
CVE-2021-32686
2021-07-23 22:15:08
debian
debian
[SECURITY] [DSA 4999-1] asterisk security update
2021-11-01 19:36:09
[SECURITY] [DLA 2962-1] pjproject security update
2022-03-28 14:23:21
fortinet
fortinet
Multiple vulnerabilities in PJSIP library
2022-05-03 00:00:00
gentoo
gentoo
PJSIP: Multiple Vulnerabilities
2022-10-31 00:00:00