freeswitch

6 results · Feed

• High 7.5
  CVE-2023-51443

  FreeSWITCH susceptible to Denial of Service via DTLS Hello packets during call initiation

  FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.11, when handling DTLS-SRTP for media setup, FreeSWITC…

  signalwire freeswitch freeswitch Alpine
  Dec 27, 2023
• Medium 5.8
  CVE-2021-41158

  FreeSWITCH vulnerable to SIP digest leak for configured gateways

  FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, an attacker can perform a SIP digest leak attack ag…

  signalwire freeswitch freeswitch Alpine
  Oct 26, 2021
• Medium 5.3
  CVE-2021-41157

  FreeSWITCH does not authenticate SIP SUBSCRIBE requests by default

  FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. By default, SIP requests of the type SUBSCRIBE are not authenticated in the …

  signalwire freeswitch freeswitch Alpine
  Oct 26, 2021
• High 7.5
  CVE-2021-41105

  FreeSWITCH susceptible to Denial of Service via invalid SRTP packets

  FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. When handling SRTP calls, FreeSWITCH prior to version 1.10.7 is susceptible …

  signalwire freeswitch freeswitch Alpine
  Oct 25, 2021
• High 8.6
  CVE-2021-41145

  FreeSWITCH susceptible to Denial of Service via SIP flooding

  FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. FreeSWITCH prior to version 1.10.7 is susceptible to Denial of Service via S…

  signalwire freeswitch freeswitch Alpine
  Oct 25, 2021
• High 7.5
  CVE-2021-37624 Public exploit

  FreeSWITCH does not authenticate SIP MESSAGE requests, leading to spam and message spoofing

  FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.10.7, FreeSWITCH does not authenticate SIP MESSAGE reques…

  signalwire freeswitch freeswitch Alpine
  Oct 25, 2021