Signalwire

Freeswitch

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2026-49848

  • EPSS 0.17%
  • Veröffentlicht 09.06.2026 16:05:42
  • Zuletzt bearbeitet 10.06.2026 15:06:53

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, mod_verto's check_auth userauth branch wro...

7.5

CVE-2026-49847

  • EPSS 0.41%
  • Veröffentlicht 09.06.2026 16:05:08
  • Zuletzt bearbeitet 10.06.2026 15:06:45

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, a single unauthenticated WebSocket frame c...

5.3

CVE-2026-49843

  • EPSS 0.28%
  • Veröffentlicht 09.06.2026 16:04:55
  • Zuletzt bearbeitet 10.06.2026 15:07:18

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, mod_verto's JSON-RPC handler bound the con...

7.5

CVE-2026-49842

  • EPSS 0.45%
  • Veröffentlicht 09.06.2026 16:02:58
  • Zuletzt bearbeitet 10.06.2026 15:06:33

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, mod_verto's WebSocket frame loop intercept...

9.8

CVE-2026-49841

  • EPSS 0.39%
  • Veröffentlicht 09.06.2026 16:02:24
  • Zuletzt bearbeitet 10.06.2026 15:07:23

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, the mod_verto HTTP request handler allocat...

9.1

CVE-2026-49840

  • EPSS 0.31%
  • Veröffentlicht 09.06.2026 16:00:56
  • Zuletzt bearbeitet 10.06.2026 15:06:24

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.1, esl_recv_event() parses Content-Length wit...

7.5

CVE-2026-49475

  • EPSS 0.28%
  • Veröffentlicht 09.06.2026 16:00:32
  • Zuletzt bearbeitet 10.06.2026 15:06:09

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, a STUN packet whose declared attribute len...

5.3

CVE-2026-49472

  • EPSS 0.22%
  • Veröffentlicht 09.06.2026 15:59:49
  • Zuletzt bearbeitet 10.06.2026 15:06:00

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, FreeSWITCH includes a vulnerable function,...

7.5

CVE-2026-45771

  • EPSS 0.34%
  • Veröffentlicht 09.06.2026 15:51:49
  • Zuletzt bearbeitet 10.06.2026 15:04:37

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to version 1.11.0, FreeSWITCH's bundled XML parser expands ne...

7.5

CVE-2021-36513

Exploit
  • EPSS 1.81%
  • Veröffentlicht 18.10.2021 17:15:07
  • Zuletzt bearbeitet 21.11.2024 06:13:46

An issue was discovered in function sofia_handle_sip_i_notify in sofia.c in SignalWire freeswitch before 1.10.6, may allow attackers to view sensitive information due to an uninitialized value.