CVE-2021-43300 is a critical stack overflow vulnerability in the PJSUA API, specifically within the pjsua_recorder_create function, affecting PJSIP and Debian Linux. An unauthenticated attacker can exploit this by providing a malicious filename argument, leading to a buffer overflow. This allows for arbitrary code execution, data compromise, and denial of service, as indicated by its CVSS score of 9.8. Despite its severe impact, there is currently no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 2.11.1CPE matchmatch criteria | cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:* | ||
9.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | ||
10.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | ||
11.0CPE matchmatch criteria | cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.