CVE-2021-41141

PJSIP is a free and open source multimedia communication library written in the C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In various parts of PJSIP, when error/failure occurs, it is found that the function returns without releasing the currently held locks. This could result in a system deadlock, which cause a denial of service for the users. No release has yet been made which contains the linked fix commit. All versions up to an including 2.11.1 are affected. Users may need to manually apply the patch.

• CWE-667
• CWE-667

• https://github.com/pjsip/pjproject/commit/1aa2c0e0fb60a1b0bf793e0d834073ffe50fb196Patch, Third Party Advisory
• https://github.com/pjsip/pjproject/security/advisories/GHSA-8fmx-hqw7-6gmcPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00035.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202210-37Third Party Advisory
• https://github.com/pjsip/pjproject/commit/1aa2c0e0fb60a1b0bf793e0d834073ffe50fb196Patch, Third Party Advisory
• https://github.com/pjsip/pjproject/security/advisories/GHSA-8fmx-hqw7-6gmcPatch, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2022/03/msg00035.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202210-37Third Party Advisory

Published

Jan 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41136Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior …3.7
• CVE-2021-41137Minio is a Kubernetes native application for cloud storage. …8.8
• CVE-2021-41138Frontier is Substrate's Ethereum compatibility layer. In the…5.3
• CVE-2021-41139Anuko Time Tracker is an open source, web-based time trackin…6.1
• CVE-2021-4114Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-41140Discourse-reactions is a plugin for the Discourse platform t…5.3
• CVE-2021-41142Tuleap Open ALM is a libre and open source tool for end to e…5.4
• CVE-2021-41143OpenMage LTS is an e-commerce platform. Prior to versions 19…7.2
• CVE-2021-41144OpenMage LTS is an e-commerce platform. Prior to versions 19…8.8
• CVE-2021-41145FreeSWITCH is a Software Defined Telecom Stack enabling the …7.5
• CVE-2021-41146qutebrowser is an open source keyboard-focused browser with …8.8
• CVE-2021-41147Tuleap Open ALM is a libre and open source tool for end to e…7.2