FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

pjsip -- Race condition in SSL socket server

Affected packages
		pjsip	<	2.11.1

Details

VuXML ID	92ad12b8-ec09-11eb-aef1-0897988a1c07
Discovery	2021-07-23
Entry	2021-07-23

pjsip reports:

There are a couple of issues found in the SSL socket:

A race condition between callback and destroy, due to the accepted socket having no group lock.

SSL socket parent/listener may get destroyed during handshake.

[source]

References

CVE Name	CVE-2021-32686
URL	https://github.com/pjsip/pjproject/security/advisories/GHSA-cv8x-p47p-99wr