Vulnerabilities

TI-2021-04474 CVE-2021-21375

Crash in receiving updated SDP answer after initial SDP negotiation failed

LOW 33

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0208 Published 2021-03-10 No fix listed CWE-400

TI-2020-12032 CVE-2020-15260

Existing TLS connections can be reused without checking remote hostname

LOW 32

PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE.

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00987 Published 2021-03-10 No fix listed CWE-297

Vulnerabilities

Filters

Crash in receiving updated SDP answer after initial SDP negotiation failed

Existing TLS connections can be reused without checking remote hostname