PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade pjproject | Aug 22, 2024 | Mar 10, 2021 |
| Debian | — | Upgrade ring | Apr 26, 2021 | Mar 10, 2021 |
| Gentoo Linux | — | Upgrade net-libs/pjproject. | Jul 21, 2021 | Mar 10, 2021 |
| Ubuntu | — | Upgrade libpjmedia2 (Ubuntu Pro)Upgrade python-pjproject (Ubuntu Pro)Upgrade libpjsip2 (Ubuntu Pro)Upgrade libpj2 (Ubuntu Pro)Upgrade libpjnath2 (Ubuntu Pro)Upgrade libpjsua2 (Ubuntu Pro) | Mar 27, 2026 | Mar 24, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub