Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

freeswitch — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in freeswitch, with AI-generated Chinese analysis, references, and POCs.

Vendor: signalwire

CVE IDTitleCVSSSeverityPaused
CVE-2023-51443 FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation CWE-703 7.5 High2023-12-27
CVE-2023-40019 FreeSWITCH allows authorized users to cause a denial of service attack by sending re-INVITE with SDP containing duplicate codec names CWE-770 7.5 High2023-09-15
CVE-2023-40018 FreeSWITCH allows remote users to trigger out of bounds write by offering an ICE candidate with unknown component ID CWE-787 7.5 High2023-09-15
CVE-2021-41158 FreeSWITCH vulnerable to SIP digest leak for configured gateways CWE-200 5.8 Medium2021-10-26
CVE-2021-41157 FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default CWE-287 5.3 Medium2021-10-26
CVE-2021-41105 FreeSWITCH susceptible to Denial of Service via invalid SRTP packets CWE-20 7.5 High2021-10-25
CVE-2021-41145 FreeSWITCH susceptible to Denial of Service via SIP flooding CWE-400 8.6 High2021-10-25
CVE-2021-37624 FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing CWE-287 7.5 High2021-10-25

All 8 known CVE vulnerabilities affecting freeswitch with full Chinese analysis, references, and POCs where available.