CVE-2021-21375: teluu pjsip +1 lainnya

csirt@kutim:~/threat-intel/cve/CVE-2021-21375

CVSS 6.5 · Medium EPSS 2,1%

Kerentanan Uncontrolled Resource Consumption pada teluu pjsip, debian linux. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service.

Rincian

Terbit di NVD: 10 Maret 2021
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-400: Uncontrolled Resource Consumption
CWE-754: Improper Check for Unusual or Exceptional Conditions
EPSS (30 hari): 2,1% peluang dieksploitasi; lebih tinggi dari 81,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
teluu	pjsip	Semua versi hingga 2.10
debian	debian linux	Versi 9.0

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/pjsip/pjproject/commit/97b3d7addbaa720b7ddb0af9bf6f3e443e664365 patch · advisory pihak ketiga
https://github.com/pjsip/pjproject/security/advisories/GHSA-hvq6-f89p-frvp exploit · patch · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2021/04/msg00023.html mailing list · advisory pihak ketiga
https://lists.debian.org/debian-lts-announce/2021/05/msg00020.html mailing list · advisory pihak ketiga
https://security.gentoo.org/glsa/202107-42 advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.