[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f4UCwm7xCf6QB2SptGRwPnc_sbN47-o9w22K-EHrM34E":3,"g5a-risk:CVE-2021-43845":182},{"success":4,"data":5,"meta":180},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":50,"epssPercentile":28,"epssTimeSeries":51,"severity":52,"affectedProducts":53,"affectedProductsCount":70,"references":71,"referencesCount":123,"weaknesses":124,"weaknessesCount":132,"isActivelyExploited":49,"cisaInfo":28,"otxData":28,"relatedBlogPosts":133,"seoMetadata":134,"configurations":159,"relatedVendorCves":178,"notableEvents":179},"CVE-2021-43845","What is CVE-2021-43845?","PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is not checked against the received packet size, potentially resulting in an out-of-bound read access. This affects all users that use PJMEDIA and RTCP XR. A malicious actor can send a RTCP XR message with an invalid packet size.","PJSIP is a free and open source multimedia communication library. In version 2.11.1 and prior, if incoming RTCP XR message contain block, the data field is n...","2021-12-27T18:15:07.46","2025-11-04T16:15:45.773",9.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":26,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:L","NETWORK","LOW","NONE","UNCHANGED","HIGH",8.2,null,3.9,4.2,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":29,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":35,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"CRITICAL",5.2,[],[39],{"Source":32,"Type":33,"CVSSData":40,"BaseSeverity":46,"ExploitabilityScore":47,"ImpactScore":48,"ACInsufInfo":49,"ObtainAllPrivilege":49,"ObtainUserPrivilege":49,"ObtainOtherPrivilege":49,"UserInteractionRequired":49},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":43,"IntegrityImpact":24,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":45,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:P","PARTIAL",6.4,"","MEDIUM",10,4.9,false,0.03622,[50,50,50,50,50,50,50],"Critical",[54,59,64,67],{"vendor":55,"product":56,"version":57,"criteria":58,"vulnerable":4},"teluu","pjsip","*","cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"debian","debian_linux","9.0","cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":65,"criteria":66,"vulnerable":4},"10.0","cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",{"vendor":60,"product":61,"version":68,"criteria":69,"vulnerable":4},"11.0","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",4,[72,78,83,86,91,94,97,101,104,106,108,110,112,114,116,119,121],{"url":73,"source":74,"tags":75},"https:\u002F\u002Fgithub.com\u002Fpjsip\u002Fpjproject\u002Fcommit\u002Ff74c1fc22b760d2a24369aa72c74c4a9ab985859","GitHub",[76,77],"Patch","Third Party Advisory",{"url":79,"source":74,"tags":80},"https:\u002F\u002Fgithub.com\u002Fpjsip\u002Fpjproject\u002Fpull\u002F2924",[81,82,76,77],"Exploit","Issue Tracking",{"url":84,"source":74,"tags":85},"https:\u002F\u002Fgithub.com\u002Fpjsip\u002Fpjproject\u002Fsecurity\u002Fadvisories\u002FGHSA-r374-qrwv-86hh",[76,77],{"url":87,"source":88,"tags":89},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F03\u002Fmsg00035.html","Debian",[90,77],"Mailing List",{"url":92,"source":88,"tags":93},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2022\u002F11\u002Fmsg00021.html",[90,77],{"url":95,"source":88,"tags":96},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2023\u002F08\u002Fmsg00038.html",[],{"url":98,"source":99,"tags":100},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202210-37","Gentoo",[77],{"url":102,"source":88,"tags":103},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2022\u002Fdsa-5285",[77],{"url":73,"source":74,"tags":105},[76,77],{"url":79,"source":74,"tags":107},[81,82,76,77],{"url":84,"source":74,"tags":109},[76,77],{"url":87,"source":88,"tags":111},[90,77],{"url":92,"source":88,"tags":113},[90,77],{"url":95,"source":88,"tags":115},[],{"url":117,"source":88,"tags":118},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2024\u002F09\u002Fmsg00030.html",[],{"url":98,"source":99,"tags":120},[77],{"url":102,"source":88,"tags":122},[77],17,[125],{"id":126,"name":127,"description":128,"extendedDescription":45,"status":129,"abstraction":130,"structure":131},"CWE-125","Out-of-bounds Read","The product reads data past the end, or before the beginning, of the intended buffer.","Draft","Base","Simple",1,[],{"title":135,"metaDescription":136,"keywords":137,"canonicalUrl":138,"structuredData":139},"What is CVE-2021-43845? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-43845, a critical severity cyber security vulnerability from 2021. PJSIP is a free and open source multimedia communicatio...","CVE-2021-43845, CVE-2021-43845 vulnerability, CVE-2021-43845 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, teluu security, debian security, pjsip vulnerability, debian_linux vulnerability","\u002Fwhat-is\u002Fcve-2021-43845",{"@context":140,"@type":141,"headline":135,"description":136,"datePublished":10,"dateModified":11,"author":142,"publisher":146,"about":150,"mainEntityOfPage":154,"articleSection":157,"keywords":158},"https:\u002F\u002Fschema.org","TechArticle",{"@type":143,"name":144,"url":145},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":143,"name":144,"url":145,"logo":147},{"@type":148,"url":149},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":151,"name":6,"description":152,"additionalType":153},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":155,"@id":156},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-43845","Cybersecurity","CVE-2021-43845, CVE-2021-43845 vulnerability, CVE-2021-43845 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[160,168],{"Operator":28,"Negate":28,"Nodes":161},[162],{"Operator":163,"Negate":49,"CPEMatch":164},"OR",[165],{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":166,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":167},"6BB0273A-3235-4BC7-A1BE-7D35BABD8617","2.11.1",{"Operator":28,"Negate":28,"Nodes":169},[170],{"Operator":163,"Negate":49,"CPEMatch":171},[172,174,176],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":173,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"DEECE5FC-CACF-4496-A3E7-164736409252",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":175,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":177,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"FA6FEEC2-9F11-4643-8827-749718254FED",[],[],{"lastModified":11,"cacheTime":181,"version":41},1792453898978,{"score":183,"band":184,"action":185,"scoredAt":186},59,"Medium","Plan remediation","2026-10-16T06:52:52.523306+00:00"]