vulnerability

Alpine Linux: CVE-2021-21375: Uncontrolled Resource Consumption

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:N/A:P)

Published

Mar 10, 2021

Added

Aug 22, 2024

Modified

Jun 18, 2026

Description

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service.

Solution

alpine-linux-upgrade-pjproject

References

CVE-2021-21375
https://attackerkb.com/topics/CVE-2021-21375
https://security.alpinelinux.org/vuln/CVE-2021-21375
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-8685
CWE-400
CWE-754
EUVD-EUVD-2021-8685

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report