Advisories · Technology
signalwire freeswitch.
Every CVE that names signalwire freeswitch among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
FreeSWITCH: Pre-authentication invalid pointer dereference in mod_rtmp connect command handling
- signalwire freeswitch
- Memory corruption
- CVSS 8.2 High
FreeSWITCH mod_spandsp: out-of-bounds write parsing UDPTL error-recovery data
- signalwire freeswitch
- Memory corruption
- CWE-129
- CVSS 9.1 CriticalCritical · CVSS 9+
FreeSWITCH: Inbound ICE connectivity checks are accepted without verifying STUN MESSAGE-INTEGRITY
- signalwire freeswitch
- Authentication bypass
- Weak cryptography or TLS
- CVSS 8.2 High
FreeSWITCH: Pre-authentication heap buffer overflow in core XML empty-entity decoding
- signalwire freeswitch
- Memory corruption
- CVSS 2.7 Low
FreeSWITCH: Heap out-of-bounds read in FreeSWITCH core variable expansion via `${variable:offset}` slicing
- signalwire freeswitch
- Memory corruption
- Information disclosure
- CVSS 7.5 High
FreeSWITCH: Out-of-bounds read in RTCP NACK feedback parsing
- signalwire freeswitch
- Memory corruption
- CVSS 9.8 CriticalCritical · CVSS 9+
FreeSWITCH: Inbound SIP MESSAGE can select the api chat proto and run FreeSWITCH API commands
- signalwire freeswitch
- Command injection
- CWE-749
- CVSS 7.4 High
FreeSWITCH: DTLS-SRTP peer certificate is not bound to the SDP fingerprint when FreeSWITCH is the DTLS server
- signalwire freeswitch
- Weak cryptography or TLS
- CWE-300
- CVSS 5.3 Medium
FreeSWITCH: Pre-authentication out-of-bounds writes in mod_xml_rpc WebSocket frame parsing
- signalwire freeswitch
- Memory corruption
- CWE-193
- CVSS 9.1 CriticalCritical · CVSS 9+
FreeSWITCH: Pre-authentication heap out-of-bounds write in mod_xml_rpc WebSocket frame length handling
- signalwire freeswitch
- Memory corruption
- CWE-681
- CVSS 8.8 High
FreeSWITCH: Channel-variable injection via SIP REFER leads to command execution in mod_sofia
- signalwire freeswitch
- Command injection
- Code injection
- CVSS 7.5 High
FreeSWITCH: Pre-authentication process termination in the Event Socket via an unbounded Content-Length
- signalwire freeswitch
- Memory corruption
- Denial of service
- CVSS 7.5 High
FreeSWITCH: Pre-authentication stack buffer overflow in mod_rtmp control-message handling
- signalwire freeswitch
- Memory corruption
- CVSS 5.9 Medium
FreeSWITCH: Stack buffer overflow in mod_rtmp AVC sequence-header construction
- signalwire freeswitch
- Memory corruption
- CVSS 7.5 High
FreeSWITCH: Pre-authentication stack buffer overflow in mod_xml_rpc HTTP directory authentication
- signalwire freeswitch
- Memory corruption
- CVSS 7.5 High
FreeSWITCH: Pre-authentication out-of-bounds write in MSRP message body parsing
- signalwire freeswitch
- Memory corruption
- CVSS 7.5 High
FreeSWITCH: Out-of-bounds read in mod_rtmp H.264 video message parsing
- signalwire freeswitch
- Memory corruption
- CVSS 6.5 Medium
FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP Contact display-name
- signalwire freeswitch
- Memory corruption
- CVSS 7.5 High
FreeSWITCH: Stack buffer overflow parsing the SDP a=crypto key material on inbound calls
- signalwire freeswitch
- Memory corruption
- CVSS 5.9 Medium
FreeSWITCH: Off-by-one heap write in core XML serialization of four-byte UTF-8 sequences
- signalwire freeswitch
- Memory corruption
- CWE-193
- CVSS 6.5 Medium
FreeSWITCH mod_sofia: stack buffer overflow from an over-long SIP To-header user
- signalwire freeswitch
- Memory corruption
- CVSS 4.3 Medium
FreeSWITCH: Pre-authentication `userVariables` injection in `mod_verto`
- signalwire freeswitch
- Authentication bypass
- CVSS 7.5 High
FreeSWITCH: Stack overflow in bundled cJSON parser via deeply nested JSON
- signalwire freeswitch
- Denial of service
- CVSS 5.3 Medium
FreeSWITCH: Pre-authentication session eviction via attacker-chosen `sessid` in `mod_verto`
- signalwire freeswitch
- Authentication bypass
- CVSS 7.5 High
FreeSWITCH: Pre-authentication bandwidth amplification via `mod_verto` speed-test frames
- signalwire freeswitch
- Denial of service
- CVSS 9.8 CriticalCritical · CVSS 9+
FreeSWITCH: Pre-authentication heap buffer overflow in `mod_verto` HTTP POST body read
- signalwire freeswitch
- Memory corruption
- CVSS 9.1 CriticalCritical · CVSS 9+
FreeSWITCH: Pre-authentication heap buffer overflow in libesl `Content-Length` parsing
- signalwire freeswitch
- Memory corruption
- CWE-20
- CVSS 7.5 High
FreeSWITCH: Out-of-bounds memory access in core STUN attribute parsing
- signalwire freeswitch
- Memory corruption
- CWE-20
- CVSS 5.3 Medium
FreeSWITCH includes a vulnerable function, PREFIX(prologTok)() from libexpat
- signalwire freeswitch
- CWE-116
- CVSS 7.5 High
Freeswitch Denial-of-Service in SIP PUBLISH Requests via XML Entity Expansion
- signalwire freeswitch
- Denial of service
- CVSS 7.5 High
FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation
- signalwire freeswitch
- CWE-703
- CVSS 7.5 High
FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names
- signalwire freeswitch
- Denial of service
- CVSS 7.5 High
FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID
- signalwire freeswitch
- Memory corruption
- CVSS 5.8 Medium
FreeSWITCH vulnerable to SIP digest leak for configured gateways
- signalwire freeswitch
- Information disclosure
- CVSS 5.3 Medium
FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default
- signalwire freeswitch
- Authentication bypass
- CVSS 7.5 High
FreeSWITCH susceptible to Denial of Service via invalid SRTP packets
- signalwire freeswitch
- CWE-20
- CVSS 8.6 High
FreeSWITCH susceptible to Denial of Service via SIP flooding
- signalwire freeswitch
- Denial of service
- CVSS 7.5 High
FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing
- signalwire freeswitch
- Authentication bypass