Bug 1986481 (CVE-2021-32686) - CVE-2021-32686 pjproject: race condition in SSL socket server
Summary: CVE-2021-32686 pjproject: race condition in SSL socket server
Keywords:
Status: CLOSED UPSTREAM
Alias: CVE-2021-32686
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 1986482 1986483
Blocks:
TreeView+ depends on / blocked
 
Reported: 2021-07-27 16:40 UTC by Guilherme de Almeida Suckevicz
Modified: 2021-07-28 01:08 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2021-07-27 19:06:50 UTC
Embargoed:


Attachments (Terms of Use)

Description Guilherme de Almeida Suckevicz 2021-07-27 16:40:17 UTC
PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP before version 2.11.1, there are a couple of issues found in the SSL socket. First, a race condition between callback and destroy, due to the accepted socket having no group lock. Second, the SSL socket parent/listener may get destroyed during handshake. Both issues were reported to happen intermittently in heavy load TLS connections. They cause a crash, resulting in a denial of service. These are fixed in version 2.11.1.

References:
https://github.com/pjsip/pjproject/security/advisories/GHSA-cv8x-p47p-99wr
https://github.com/pjsip/pjproject/releases/tag/2.11.1

Upstream patch:
https://github.com/pjsip/pjproject/pull/2716
https://github.com/pjsip/pjproject/commit/d5f95aa066f878b0aef6a64e60b61e8626e664cd

Comment 1 Guilherme de Almeida Suckevicz 2021-07-27 16:40:36 UTC
Created pjproject tracking bugs for this issue:

Affects: epel-all [bug 1986483]
Affects: fedora-all [bug 1986482]

Comment 2 Product Security DevOps Team 2021-07-27 19:06:50 UTC
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.

Comment 3 Product Security DevOps Team 2021-07-28 01:08:04 UTC
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.


Note You need to log in before you can comment on or make changes to this bug.